Suzan
Shrestha
Offense meets Defense: Penetration Testing, Network Security, AI Security Research, Digital Forensics, SIEM, and Incident Response.
suzan@kali:~$ whoami
About Me
I'm a Cybersecurity Researcher and Penetration Tester who lives at the intersection of Offense and Defense—Red Teaming, AI Risk Research, and Offensive Security are where my curiosity about systemic vulnerabilities finds its outlet.
Backed by hands-on experience in Web Application Testing, Network Security, SIEM Monitoring, and Incident Response, I simulate realistic adversary behavior to help organizations see their blind spots before attackers do.
Core Interests
Education
Technical Arsenal
Core competencies across offensive security, networking, programming, and systems — built through labs, certs, and real-world engagements.
Proficiency
Tools & Technologies
All Domains
Featured Work
Click any card to expand features. Projects built in real lab environments.
ReStoreX
CompleteAdvanced Windows Data Recovery Software
Advanced Windows-based data recovery software designed to recover deleted, formatted, and lost files from multiple file systems.
Active Directory Attack & Defense Simulation Lab
CompleteRed Team & Blue Team Active Directory Lab
Enterprise Active Directory environment built for offensive security testing, privilege escalation, and defensive monitoring.
Enterprise Security Infrastructure Lab
CompleteFirewall, IDS/IPS, VPN & SIEM Deployment
Integrated security infrastructure featuring pfSense firewall, OpenVPN, IDS/IPS, and SIEM for enterprise network protection.
SubNex
ActiveSelf-Hosted Network Asset Discovery Platform
Self-hosted pentest platform that discovers live hosts, fingerprints devices, maps network topology, and exports client-ready PDF reports.
CoveNet
ActivePrivate LAN File & Media Server
Self-hosted private file and media server for a trusted LAN — per-user private storage, two-factor auth, media streaming, and audit logging.
Work History
Building expertise through hands-on experience in offensive security, training, and real-world engagements.
Cyber Security Analyst
CurrentCybersecurity Trainer
Designing and delivering comprehensive cybersecurity training programs covering network security, ethical hacking, web application security, and incident response methodologies for aspiring security professionals.
Offensive Security Specialist
Conducting penetration testing, vulnerability assessments, and red team operations for enterprise clients. Performing security audits and delivering comprehensive reports with actionable remediation strategies.
Jr. Penetration Tester
Performing security assessments, web application penetration testing, and developing custom security tools. Gaining hands-on experience with industry-standard methodologies and reporting frameworks.
IT Manager
Handled all Information Technology related works throughout the company.
Customer Care
Providing customer support and resolving user queries for fintech digital wallet platform. Developing communication skills and understanding user experience from a service perspective.
My Path
Every lab completed, every tool mastered, and every concept learned has shaped where I am today.
Started Cybersecurity
Began my journey into cybersecurity — learning fundamentals of networking, operating systems, and security concepts.
Networking Focus
Deep dive into network security, packet analysis, and infrastructure hardening. Set up home lab environments.
Penetration Testing
Started practical penetration testing — CTF challenges, vulnerable machines, and real-world testing methodologies.
AI Hacking
Exploring AI security — adversarial machine learning, LLM prompt injection, and AI-powered attack automation.
ReStoreX
Built a Web application that can restore deleted files from storage devices along with different Digital Forensic features
Pursuing eJPT/CPTS
Preparing for eJPT and CPTS certifications to validate offensive security skills.
eJPTv2 certified!
Passed the eJPT exam with 91%
Credentials
Certifications represent waypoints on a continuous learning journey. Every exam is a benchmark, not a finish line.
AWS Academy Graduate - Cloud Foundations - Training Badge
Amazon Web Services (AWS)
AWS Academy Graduate - Cloud Foundations - Training Badge
AWS Cloud Foundations training badge covering core AWS services, architecture, pricing, and security best practices.
eJPT (eLearnSecurity Junior Penetration Tester)
INE - eLearnSecurity
eJPT (eLearnSecurity Junior Penetration Tester)
Successfully earned the eJPT certification by demonstrating practical skills in network and web application penetration testing, enumeration, exploitation, post-exploitation, pivoting, and internal network assessment. This certification validates hands-on offensive security knowledge and a methodology-driven approach to penetration testing.
CPTS (Certified Penetration Testing Specialist)
Hack The Box
CPTS (Certified Penetration Testing Specialist)
Planned certification from Hack The Box Academy - an advanced, fully hands-on credential covering Active Directory exploitation, advanced web attacks, pivoting, and privilege escalation. The CPTS exam mirrors real-world penetration testing engagements with a heavy emphasis on methodology and reporting.
Writeups & Research
Technical writeups, research notes, and walkthroughs covering offensive and defensive security topics.
Coming Soon
Research notes, CTF walkthroughs, and offensive security writeups are being drafted. Check back soon for technical deep dives.
Get In Touch
Available for security consulting, red team engagements, training partnerships, and project collaborations.
Direct Email
Open to freelance projects, consulting engagements, and full-time security roles. Response within 24 hours.