Harshvardhan Kamble, Security Analyst and Engineer

Portrait of Harshvardhan Kamble

01 / Selected work

I find the threats.
Then I build the fixes.

Harsh
K.

Security analyst & engineer
SOC · Detection · Cloud security
Georgia State '27

Resume Contact me

Security Analyst & Engineer /
Atlanta, GA

01 / About

I break things
so they don't break.

Hi, I'm Harsh, a security analyst and engineer based in Atlanta. I'm graduating from Georgia State University with a degree in Computer Science in May 2027. My first job in tech was building websites as an intern. Today I'm an IT student assistant at Georgia State, fixing tech problems for professors and staff. My home lab is a crime scene on purpose. Kerberoasting, brute-force logins and pass-the-hash all happen there. Every attack gets caught in Splunk and mapped to MITRE ATT&CK. Then it gets shut down for good. In the cloud, my tools flag risky AWS IAM paths. They also stop insecure Terraform before it ships. Outside the lab, I compete in CTFs and hackathons. Now I want to do this for a real team. Off the clock, you'll find me playing poker, shooting pool, or hitting balls at Topgolf with zero technique.

02 / A few things I've built

Selected work

ATTACK PATH · lab.local rpcclient pass-the-hash KALI DC01 SYSTEM ✓ HARDENED · LDAP signing · Protected Users
01

AD Attack & Defense Lab

Azure · Active Directory · Impacket

 EventCode 4625 · failed logons T1110 ALERT threshold ≥ 5 / 5m brute force detected · src 192.168.64.3
02

Home SOC Lab

Splunk · Sysmon · MITRE ATT&CK

 IAM ESCALATION PATHS ADMIN safe
03

NHI Escalation Scanner

Python · AWS IAM · Graph analysis

 CI · security-scan.yml commit checkov deploy ✓ ! ✕ ✕ CKV_AWS_20 · S3 bucket is public merge blocked until fixed
04

Terraform Security Pipeline

Terraform · Checkov · GitHub Actions

 $ vulnscan scanme.nmap.org [+] 22/tcp OpenSSH 6.6.1 [+] 80/tcp Apache 2.4.7 HIGH HIGH [*] NVD lookup · 4 CVEs CVE-2021-44224 · CVSS 8.2
05

vulnscan

Python · Sockets · NVD API

03 / Skills

Many tools.
One mindset.

Detect & attack

  • Splunk
  • Wireshark
  • NmNmap
  • Metasploit
  • Burp Suite
  • Kali Linux
  • VirusTotal
  • OWASP ZAP

Cloud & DevSecOps

  • AWS
  • AzAzure
  • ADActive Directory
  • Terraform
  • Docker
  • GitHub Actions

Code

  • Python
  • Bash
  • SQL
  • Linux
  • Git

04 / Experience

Where I've
put in the hours.

  1. Aug 2025 — Present

    Student Assistant

    Georgia State University · Atlanta, GA

    • Troubleshoot and fix hardware and software issues for professors and staff across campus.
    • Resolve problems during live lectures and work shifts so teaching and work can continue.
    • Explain fixes in plain language to non-technical users.
    • Troubleshooting
    • Windows
    • macOS
    • Hardware
    • User support

  2. Jun 2022 — Jul 2022

    Web Developer Intern

    Zaio Institute of Technology

    • Worked with a team of 4-6 developers and designers to ship 5+ responsive landing pages through 10+ rounds of client feedback.
    • Applied secure coding practices across those pages, including input validation and secure form handling.
    • Cut mobile load time by 0.5-1 second and reduced bounce rate by 12%.
    • HTML
    • CSS
    • JavaScript
    • Secure coding

05 / Journey

How I
got here.

  1. Jun 2022

    Web Developer Intern at Zaio

    Built responsive websites with a team of developers and designers.

  2. Aug 2025

    Student Assistant at Georgia State

    Fixing tech problems for professors and staff across campus.

  3. May 2026

    Active Directory Attack & Defense Lab

    Dumped NTLM hashes, used pass-the-hash to reach SYSTEM, then hardened the domain.

  4. Jun 2026

    Built vulnscan

    A multi-threaded Python scanner that grabs banners and looks up CVEs.

  5. Jul 2026

    Home SOC Lab

    Caught brute-force and PowerShell attacks in Splunk and mapped them to MITRE ATT&CK.

  6. Jul 2026

    NHI Escalation Scanner

    Graphed AWS IAM permissions to find hidden paths to admin.

  7. Aug 2026

    Terraform Security Pipeline

    Cut 45 security findings to zero with a CI/CD policy gate.

  8. Next

    Security Engineer

    Ready to detect, defend and build for a real security team.