Swarup Saha

Résumé

Résumé

Security Engineer at Mutual Trust Bank PLC. I work across offensive security, SOC engineering, threat research, and security automation to build safer and more resilient systems.


[download pdf][open in new tab]

Summary

I research security weaknesses, build cybersecurity tools, automate security operations, and explore how AI can improve offensive and defensive security.

Experience

Security Engineer, Mutual Trust Bank PLC

Apr. 2023 — Present

Working across offensive and defensive security in a banking environment — from penetration testing to SOC operations.

  • Conducting web, API, mobile, system, and infrastructure security assessments
  • Performing vulnerability assessment and penetration testing
  • Validating security patches and remediation
  • Investigating security events and incidents
  • Supporting SOC operations with IBM QRadar
  • Threat hunting and threat intelligence
  • Building security automation for repetitive workflows
  • Communicating security risk to technical and management teams

Red Team, Pentabug

Mar. 2023 — Present

Remote red team engagements — project-based penetration testing across web, API, and mobile targets.

  • Project-based pentest (web, API, mobile)
  • Retest applications and provide solutions

Red Team Researcher, Beetles Cyber Security Ltd.

Nov. 2018 — Mar. 2023

Offensive security research and red team assessment work across internal and external targets.

  • Conduct internal and external VA/PT
  • Exploit modification
  • Maintain cloud infrastructure
  • Perform OSINT and configuration audit
  • Research and development

Founded

Feintor, Founder, cybersecurity company

2026 — Present

A cybersecurity company, founded in 2026 and in its early days. feintor.com

SSRO Labs, Founder, non-profit

Ongoing

A non-profit that builds and releases free cybersecurity tools and security automation, published openly for anyone to use. ssrolabs.xyz

Certifications

Professional certifications
CEHCertified Ethical HackerEC-Council
CISACertified Information Systems AuditorISACA
eCPPTeLearnSecurity Certified Professional Penetration TesterINE Security

Skills

Areas of work grouped by discipline
Offensive SecurityWeb Application Penetration Testing, API Security Testing, Mobile Application Security, Network Penetration Testing, Vulnerability Assessment, Red Team Operations, Security Research
Defensive SecuritySOC Operations, SIEM, IBM QRadar, Threat Hunting, Incident Response, Threat Intelligence, Vulnerability Management
Programming & AutomationPython, JavaScript, TypeScript, Bash, Security Automation, REST APIs
AI & Emerging SecurityLLM Applications, Prompt Engineering, Retrieval-Augmented Generation (RAG), Agentic AI Workflows, AI Security, Security Copilots, AI-Powered SOC, AI-Powered Penetration Testing
Platforms & InfrastructureLinux, Windows, Docker, GitHub, DigitalOcean, Cloudflare, Networking