I am pursuing Master of Science in Cybersecurity at Northeastern University with experience as a Software developer. While leading a team to develop frontend web application and consuming backend Rest API, my curiosity towards digital security commenced. This intrigues led me to advance my career in finding vulnerabilities, performing cyber forensics, and designing security controls to prevent threats. My hunger for knowledge and training from the university contributed to the addition of my skills in cryptographic schemes, access control, software security, risk management, and penetration testing.
Five years of work experience developed my skills in programming language, leadership, management, and teamwork. My contributions towards the project and delivering with the exception quality bagged me "Insta" award.
I consider myself as a persistent, detail-oriented, responsible, hard-working, quick learner, and committed towards work. To keep me updated, I read articles on security breaches, zero-day attacks, and security patches. During my free time, I like to read books and browse internet.
Northeastern University, Boston, MA
Goa University, India
Bootstrap
Metasploit
Autopsy
SqlMap
April 2021
Developed translator tool to convert Yara and Sigma rules into Securonix SIEM Engine (Spotter) query format.
December 2020
Designed and implemented virus using C that will infect one file at a time in the same directory it is executed. The infected file will keep on infecting other files based on its location, thus self-replicating & infecting legitimate files.
March 2020
Performed reconnaissance on a test application to gain access to the Operating system and application along with maintaining backdoor entry into application.
February 2020
Performed analysis on a digital evidence to determine case in-hand using windows registry hives, and shellbags.
November 2019
Set up firewall and routed packets using iptables to protect internal network from the Internet
November 2019
Developed an offline dictionary-based password cracking tool using Python. Multi-threading was implemented in the tool to improve speed and efficiency.
November 2019
The paper comprises of instructions to identify cyber-threats through the Indicators of Compromise, and devising strategies to mitigate the impact of the same. The paper focuses on five common incidents and the response plan of each incident are divided into five steps of Identification, Notification, Analysis, Containment/Eradication and Recovery.
October 2019
Designed a secure enterprise network architecture that includes network tiers to separate internet-facing system from the internal network (zoning); assigning IP address subnet to zones (subnetting); network access control rules to monitor and route the traffic; security devices to detect and prevent intrusions; and monitoring the traffic using SIEM tools.
Sept 2019
Designed and implemented cryptographic schemes to provide confidentiality, integrity and authenticity using a bash script which can be used to encrypt and decrypt plain-text files along with signing and verifying the signature of the encrypted file.
CyberArk
Global Resilience Institute - Northeastern University
Northeastern University
Infosys Limited
Sushmita is wonderful to work with, and has exceptional expertise in leadership, coaching, motivation. She is dedicated, self-motivated, methodical, and very capable. She is not only a reliable and forward thinking colleague but also an inspiring team player. As a team member or a leader, Sushmita earns my highest recommendation.
Sushmita Paul is an amazing person to work with. Sushmita's technical knowledge and people management skills are exceptional. Sushmita understands the bigger picture and business value in every piece of work that she delivers. I would highly recommend Sushmita and wish her the very best in her future endeavors.
I have known Sushmita for last 5 years. She is a calm, responsible and down to earth person. The most noteworthy part of her character is her hardworking nature. She has shown immense talent and flexibility for the whole period she has been my colleague. I would gladly and wholeheartedly recommend her as her senior colleague.
Sushmita has been a consistent performer and impeccable team player. She has proved her technical competence by handling multiple projects involving challenging deliverables. Her ability to learn new technologies in limited time has helped the team to conceive efficient and improved solutions for business problems.
Sushmita is a rockstar. She worked with me over a semester with a small team of other graduate students on a pilot project to replicate the security functionality of SIPRnet using AWS and zero clients. Sushmita brought a solid IT engineering and coding background to the project and serious security chops. She worked well with the other team members and was good at explaining highly technical issues to non-technical audiences. She also took on multiple other projects to explore new technologies in our lab and led the building of a website for the medical community in response to the COVID pandemic. Highly recommend!
Sushmita was an excellent addition to the CyberArk Support team. Her brief co-op with us showed she was able to handle customer facing technical work while providing great utility for her team. I would recommend her for any customer facing technical role. She received positive feedback from both customers as well as her co-workers.
I served as Susmita's Technical Mentor and Manager throughout her internship at CyberArk. I quickly learned Sushmita was highly intelligent, hard working, and dedicated to continuous improvement. Sushmita met and exceeded every expectation we placed upon her, and always made sure to be mindful of both small technical details and keeping her customers interests first. I have no doubt Sushmita will be successful in whatever she decides on as her next endeavor.
Although for a brief tenure, it has been a pleasure working with Sushmita for her Capstone project. She lead the project team, coordinated the discussions and made sure the time-zone differences never became a hurdle in our communications. Her proactive approach towards identifying bugs, documenting test cases and tracking tasks makes her valuable for any development team. Wish her the best in her career ahead!
