📍 Germany

Cybersecurity professional with 3+ years of experience in cybersecurity risk assessment, threat modeling, vulnerability management, security architecture, and security engineering across automotive, enterprise, and industrial environments.

Experience includes application security testing, vulnerability assessment and validation, risk-based remediation, cloud security assessment, SIEM investigation, incident response, security control assessment, and detection automation.

My background combines professional cybersecurity experience with earlier application development experience in JavaScript and Java-based environments. I have worked with security frameworks and standards including ISO/IEC 27001, NIST CSF, ISO/SAE 21434, UNECE R155, CIS Controls, and MITRE ATT&CK, with foundational knowledge of NIS2, BSI IT-Grundschutz, and IEC 62443.

Vulnerability & Risk Management: Vulnerability Assessment, CVSS Risk Scoring, Risk-Based Prioritization, Remediation Recommendations, Risk Treatment, Security Control Assessment

Threat Modeling & Security Architecture: STRIDE, Threat Modeling, Attack Path Analysis, Security Risk Assessment, Security Controls, Zero Trust Architecture

Application Security: Web Application Security Testing, DAST, OWASP ZAP, OWASP Top 10, Vulnerability Validation, Secure SDLC, Secure Coding Fundamentals, SAST Fundamentals, DevSecOps Fundamentals, CI/CD Security Fundamentals

Cloud & Infrastructure Security: Microsoft Azure Security, Cloud Security Risk Assessment, IAM Fundamentals, RBAC, Least Privilege, Security Configuration Review, Network Security, Docker

Security Operations & Incident Response: Splunk Enterprise SIEM, Security Monitoring, Log Analysis, Incident Investigation, Threat Hunting, Detection Engineering, MITRE ATT&CK Mapping, Root Cause Analysis

Governance, Risk & Compliance: ISO/IEC 27001, NIST CSF, CIS Controls, Security Control Assessment, Gap Analysis, Audit Readiness, ISO/SAE 21434, UNECE R155, IEC 62443 Fundamentals, NIS2 Fundamentals, BSI IT-Grundschutz Fundamentals

Development & Automation: Python, Java, JavaScript, PowerShell, Bash/Shell, SQL, Git, Docker

Security & Privacy Specialist | Cybersecurity Analyst
📍 Regensburg, Germany

• Performed ISO/SAE 21434-aligned Threat Analysis and Risk Assessment (TARA) for safety-critical automotive systems.
• Analyzed 40+ attack paths to identify cybersecurity threats, vulnerabilities, and potential attack scenarios.
• Applied STRIDE-based threat modeling to assess security risks and support risk-based mitigation planning.
• Evaluated security controls and supported prioritization, risk treatment, and remediation activities throughout the product lifecycle.
• Collaborated with engineering teams and external suppliers to track cybersecurity risks, mitigations, and residual risk.
• Translated technical cybersecurity findings into structured risk documentation and actionable recommendations for technical and business stakeholders.
• Supported cybersecurity compliance activities aligned with automotive security requirements and standards.

Master's Thesis – Digital Twin-Based Intrusion Detection System

📍 Stuttgart / Renningen, Germany

• Designed and developed a Digital Twin-based Intrusion Detection System for Industry 4.0 connected sensor environments.
• Built containerized monitoring and detection components using Docker.
• Simulated malicious system behavior to identify anomalies and support proactive threat detection.
• Improved anomaly detection accuracy by approximately 25%.
• Automated detection and analysis workflows using Python, Shell scripting, and SQL.
• Implemented monitoring and visualization using Prometheus and Grafana.

🔗 View Digital Twin IDS Project

Bilingual Application Developer

📍 Pune, India / Tokyo, Japan

• Developed web-based user interfaces and JavaScript modules based on technical and functional requirements.
• Worked with application development technologies including JavaScript, HTML, CSS, C, and C++.
• Collaborated with cross-functional development teams to improve application functionality, design consistency, and code quality.
• Interpreted Japanese technical specifications and supported communication between Japanese and Indian development teams.
• Worked onsite in Tokyo with international stakeholders in a software development environment.

Trainee – Application Development

📍 Pune, India

• Completed structured training in Java-based enterprise application development.
• Developed foundational knowledge of software development concepts and enterprise application environments.
• Completed Japanese language and cultural training to support international software development projects.

Application Security | DAST | OWASP Top 10 | Vulnerability Assessment

Conducted manual and automated web application security testing against a controlled vulnerable application using OWASP ZAP.

• Performed crawling, manual exploration, and active security scanning.
• Investigated SQL Injection, Cross-Site Scripting (XSS), security header weaknesses, cookie issues, and insecure configurations.
• Validated security findings and analyzed their potential impact.
• Applied OWASP Top 10 concepts during vulnerability analysis.
• Developed risk-based remediation recommendations based on identified weaknesses.
• Documented assessment methodology, findings, security impact, and remediation guidance.

Technologies: OWASP ZAP, DAST, Web Application Security Testing, OWASP Top 10, Vulnerability Validation

🔗 View Repository

Application Security | Vulnerability Assessment | Penetration Testing | Digital Forensics

Performed vulnerability assessment, controlled exploitation, and forensic analysis across intentionally vulnerable lab environments.

• Identified and validated security weaknesses including SQL Injection, XSS, weak credentials, and SMB misconfigurations.
• Performed credential and service security testing in controlled environments.
• Assessed vulnerability severity and prioritized remediation based on security impact.
• Conducted forensic investigation and evidence analysis using Autopsy.
• Documented technical findings and remediation recommendations.

Technologies: OpenVAS, Nessus, Nmap, Metasploit, Hydra, DVWA, Autopsy

🔗 View Repository

Cloud Security | Risk Assessment | Security Configuration | GRC

Assessed Microsoft Azure infrastructure to identify security risks and evaluate cloud security controls.

• Reviewed Azure Virtual Machines and Network Security Groups.
• Assessed remote access exposure and security configurations.
• Evaluated monitoring configurations and security controls.
• Identified cloud security risks and developed remediation recommendations.
• Mapped security recommendations to NIST CSF, CIS Controls, and ISO/IEC 27001.

Technologies: Microsoft Azure, Azure VM, NSG, Azure Monitor, Windows Server, NIST CSF, CIS Controls

🔗 View Repository

Security Architecture | Zero Trust | IAM | Cloud Security

Designed an enterprise-scale Zero Trust security architecture addressing identity-driven threats across cloud and on-premises environments.

• Applied Zero Trust principles including least privilege and identity-based access controls.
• Integrated IAM, MFA, Conditional Access, and privileged access concepts.
• Considered cloud, enterprise IT, OT, data protection, and detection requirements.
• Developed security architecture recommendations and a phased implementation roadmap.
• Connected preventive controls with monitoring, detection, and response capabilities.

Focus Areas: Zero Trust, IAM, MFA, Conditional Access, Least Privilege, Cloud Security, OT Security, Detection & Response

🔗 View Repository

Security Operations | Threat Hunting | Detection Engineering | Incident Investigation

Investigated Linux authentication activity and developed automated detection workflows for suspicious security events.

• Analyzed authentication logs for brute-force attacks, invalid users, repeated authentication failures, and privileged account targeting.
• Developed Python-based detection automation for suspicious authentication activity.
• Used Splunk Enterprise SIEM for event correlation, investigation, and attack visualization.
• Performed threat hunting across authentication events.
• Mapped identified attack behavior to MITRE ATT&CK techniques.
• Generated structured security findings and reporting outputs.

Technologies: Splunk Enterprise, Python, Linux Authentication Logs, SIEM, MITRE ATT&CK

🔗 View Repository

Incident Response | Vulnerability Management | Cyber Resilience

Analyzed a simulated critical vulnerability and ransomware incident involving Log4Shell.

• Assessed potential business impact from critical vulnerability exposure.
• Prioritized remediation based on technical and business risk.
• Developed structured incident response and recovery recommendations.
• Used Python to support ransomware recovery activities.
• Documented incident analysis, remediation priorities, and recovery procedures.

Focus Areas: Log4Shell, Incident Response, Vulnerability Management, Risk Analysis, Ransomware Recovery, Python

🔗 View Repository

Network Security | Vulnerability Assessment | Attack Surface Analysis

Conducted structured network discovery, enumeration, and vulnerability assessment.

• Performed host discovery and TCP/UDP port scanning.
• Conducted service and version detection.
• Performed OS fingerprinting and attack surface analysis.
• Used Nmap Scripting Engine (NSE) scripts for vulnerability assessment.
• Validated potential security weaknesses through manual analysis.
• Developed risk-based remediation recommendations to strengthen network security.

Technologies: Nmap, NSE, TCP/UDP, Service Enumeration, OS Fingerprinting, Network Reconnaissance

🔗 View Repository

GRC | Security Controls | Risk Management | Audit Readiness

Performed a structured security governance and control assessment aligned with ISO/IEC 27001 and NIST CSF.

• Evaluated security controls and identified implementation gaps.
• Conducted security gap analysis across enterprise security processes.
• Assessed access management, patch verification, administrative logging, and post-incident activities.
• Developed risk-based recommendations for identified control weaknesses.
• Structured findings to support security governance, compliance assurance, and audit readiness.

Frameworks: ISO/IEC 27001, NIST CSF, Security Control Assessment, Risk Management

🔗 View Repository

Intrusion Detection | OT Security | Industry 4.0 | Detection Automation

Designed and implemented a Digital Twin-based Intrusion Detection System for connected industrial sensor environments.

• Developed a Digital Twin-based security monitoring architecture.
• Simulated malicious processes and anomalous system behavior.
• Automated detection workflows using Python and Shell scripting.
• Used Docker for containerized implementation.
• Analyzed system and network activity for security anomalies.
• Visualized monitoring and detection results using Prometheus and Grafana.

Technologies: Docker, Python, Shell, SQL, Prometheus, Grafana, tcpdump

🔗 View Repository

• Application Security
• Web Application Security Testing
• OWASP Top 10
• OWASP ZAP
• DAST
• Manual Security Testing
• Vulnerability Assessment
• Vulnerability Validation
• CVSS Risk Scoring
• Risk-Based Remediation
• Secure SDLC
• Secure Coding Fundamentals
• SAST Fundamentals
• DevSecOps Fundamentals
• CI/CD Security Fundamentals
• Burp Suite Fundamentals

• Threat Modeling
• STRIDE
• Attack Path Analysis
• Security Risk Assessment
• Security Control Assessment
• Risk Treatment
• Zero Trust Architecture
• Security Architecture Assessment

• Microsoft Azure Security
• Azure Virtual Machines
• Azure Network Security Groups
• Azure Monitor
• Cloud Security Risk Assessment
• Identity & Access Management Fundamentals
• RBAC
• Least Privilege
• MFA & Conditional Access Concepts
• Security Configuration Review

• Splunk Enterprise SIEM
• Security Monitoring
• Security Event Investigation
• Log Analysis
• Incident Investigation
• Threat Hunting
• Detection Engineering
• MITRE ATT&CK Mapping
• Root Cause Analysis
• Brute-Force Detection
• Authentication Security Analysis

• Network Security Assessment
• Network Reconnaissance
• Attack Surface Analysis
• TCP/IP
• Nmap
• Nmap Scripting Engine
• Wireshark
• tcpdump
• Linux Security
• Windows Security Fundamentals
• Docker Fundamentals

• ISO/IEC 27001
• NIST Cybersecurity Framework
• CIS Critical Security Controls
• Security Control Assessment
• Gap Analysis
• Audit Readiness
• ISO/SAE 21434
• UNECE R155
• IEC 62443 Fundamentals
• NIS2 Fundamentals
• BSI IT-Grundschutz Fundamentals

OWASP ZAP Burp Suite OpenVAS Greenbone Nessus Nmap Metasploit Hydra Splunk Enterprise Wireshark Autopsy

Python Java JavaScript PowerShell Bash Shell SQL

Linux Windows Microsoft Azure Docker Git GitLab SVN Jira

Prometheus Grafana

• 3+ years of professional cybersecurity experience across automotive, enterprise, and industrial environments.
• Analyzed 40+ cybersecurity attack paths using structured threat analysis and risk assessment methodologies.
• Applied STRIDE-based threat modeling and risk-based security assessment to support mitigation planning.
• Performed web application security assessments using OWASP ZAP and DAST techniques.
• Identified and analyzed SQL Injection, Cross-Site Scripting, insecure configurations, authentication weaknesses, and network security issues in controlled environments.
• Conducted vulnerability assessment, validation, risk prioritization, and remediation analysis.
• Investigated Linux authentication activity and developed Python-based detection automation.
• Used Splunk Enterprise SIEM for security investigation, event correlation, threat hunting, and MITRE ATT&CK mapping.
• Conducted Azure cloud security risk and configuration assessments.
• Performed ISO/IEC 27001 and NIST CSF-aligned security control and gap assessments.
• Developed a Digital Twin-based intrusion detection solution for Industry 4.0 environments.
• Background in both cybersecurity and software application development, supporting a security-focused understanding of software and system lifecycles.
• Experienced in translating technical cybersecurity findings into structured, risk-based recommendations for engineering and business stakeholders.

Mechatronic & Cyber-Physical Systems
Deggendorf Institute of Technology, Germany

Overall Grade: 1.9
Master's Thesis Grade: 1.3

Electronics & Telecommunication Engineering
Cummins College of Engineering for Women, India

• CompTIA Cybersecurity Analyst (CySA+)
• CompTIA Security+
• CompTIA A+
• Embedded Systems Security – Riscure Academy
• Governance, Risk, Compliance & Data Privacy – IBM SkillsBuild
• AI Security & Governance – Securiti

• English: Fluent
• German: B1, currently progressing
• Japanese: JLPT N3 Certified
• Hindi: Native
• Marathi: Native

• LinkedIn: linkedin.com/in/ruchi-giradkar
• GitHub: github.com/RuchiGiradkar
• Portfolio: ruchigiradkar.github.io