AP
open terminal · press ` · 0/5 flags

offensive security · OT/ICS · detection

AkshatPandey

Security engineer in training. I build and break things in OT/ICS, detection and cloud. MSc Cybersecurity at TU/e, ex-DevOps engineer.

Available full-time from July 2027 · Eindhoven, NL

No visa sponsorship needed to start in the Netherlands

Résumé last updated: Nov 2026

loc
Eindhoven, NL
edu
MSc Cybersecurity · TU/e
focus
OT/ICS security · detection · pentesting

press ` for terminal

01 / about

I break things on purpose now.

CS grad doing an MSc in Cybersecurity at TU/e. When something grabs me I go deep until I actually understand it: papers, labs, building it myself. Right now that's offensive security, and honestly it's been a while coming.

I used to mod game files as a kid to unlock stuff I wanted. Used to run cheatengine, modify game files, and tinker with memory. The ILOVEYOU virus was my first "wait, people do this for real?" moment. Turns out I've been into testing systems for a long time. I just didn't have a name for it.

At TU/e I'm doing the hands-on stuff: Intrusion Detection Lab, Advanced Network Security, Verification of Security Protocols. Currently deep in ICS/OT security: analysing captures of a Stuxnet-style attack on a Siemens S7 PLC network and reconstructing the attack sequence, and deploying RPL blackhole attacks on real nRF52840 hardware. Post-quantum crypto is what I'm reading about on the side, even though I haven't taken it yet.

where I've lived

India/Bahrain/Oman/Dubai/Canada/Netherlands

outside the terminal

Red Teaming

Started with modding game files and running CheatEngine as a kid. Now it's deploying live attacks on real hardware and reconstructing ICS incidents from network logs. OT/ICS red teaming is the goal.

K-Pop & Music

Got into it through Stray Kids and BTS. Still here cause of TWICE and LE SSERAFIM. I do listen to a variety of genres.

Gaming

Competitive to a fault. I don't stop until I hit whatever goal I set. Luckily that now goes into security research and CTFs too. I also enjoy co-op games with friends.

Homelabbing

Kali on a Raspberry Pi, VMs on my PC, all on a private network. Slowly turning it into a proper attack/defense lab.

Goals

Full-time security role from July 2027. Eventually: OT/ICS red teaming, publishing research worth citing, and building something that matters in industrial security.

02 / selected work

Things I've built & broken

shippedin progressplanned
ICS / Honeypot · 2025 – Present
in progress

featured

ICS HMI Honeypot

TU/e Honors Project

High-interaction VNC honeypot emulating a water-sector SCADA HMI over a simulated PLC, instrumented to capture operator-surface attacker activity at the protocol level. A custom asyncio RFB proxy logs attacker sessions and maps their actions to MITRE ATT&CK for ICS.

Python (asyncio)DockerOpenPLC
ICS / Research · 2026
shipped

Fingerprinting ICS Scanning Tools

Scraped 5,800 repositories down to a hand-verified set of runnable S7comm scanners, then fingerprinted them and attributed scans in live honeypot data.

PythonS7commZeek
Security + AI · 2026
shipped

Self-Hosted AI Assistant

Fully local LLM assistant that triages mail and runs VPN-routed search, hardened with prompt-injection guardrails and sandboxed egress.

PythonQwen (local LLM)SearXNG
Security + Web · 2025 – Present
in progress

4 Embedded CTF Challenges

Four CTF-style challenges (steganography, cryptography, recon) hidden across this site, plus a hacker terminal to submit flags in.

SteganographyCryptographyRecon

03 / experience & skills

The full picture

technical skills

OT/ICS

S7commModbusRPL/6LoWPANIEEE 802.15.4Contiki-NGOpenPLCRFB/VNCHoneypots

Offensive

Burp SuiteMetasploitNmapWiresharkKali LinuxOWASP Top 10MITRE ATT&CKCowrie

Detection & Forensics

ZeekML Anomaly DetectionNetwork Traffic AnalysisIDSPCAP AnalysisICS/SCADA Forensics

Engineering

PythonBashCDockerAWSAzureGitLab CISQL
mainfeature/ics-securityedu
akshat@portfolio · git log
  • Auditing the security posture of a production loyalty platform, finding detection gaps and account-abuse paths
  • Building a semi-supervised anomaly-detection pipeline on Azure to flag fraud and loyalty-account abuse
  • Built security-gated CI/CD in GitLab, cutting release time ~60% and blocking vulnerable builds
  • Shipped 12+ ETL pipelines on AWS Glue and S3 handling ~2M records/day, ~40% faster

certifications

HTB Certified Penetration Testing Specialist (CPTS)

in progress
Hack The Box · target Mar 2027

04 / contact

Let's connect

If you'd like to collaborate, say hi, or want to hire me, my inbox is open.

Best way to reach me: email. I reply within 24h.

Eindhoven, Netherlands

Email

click to reveal

LinkedIn

in/AkshatPandey1