# Aagam Shah
**Cyber Security Technical Lead at ABB**  
**aka (neutrinoguy)**

**Email:** hello@hexlab.xyz  
**Website:** https://hexlab.xyz  
**Twitter:** https://x.com/neutrinoguy  
**GitHub:** https://github.com/neutrinoguy  
**LinkedIn:** https://linkedin.com/in/neutrinoguy  
**Medium:** https://neutrinoguy.medium.com  
**RSS:** https://hexlab.xyz/feed.xml

---

## OBJECTIVE
I am highly motivated to pursue a career in cybersecurity and leverage my skills and knowledge to optimize the efficiency and effectiveness of assigned tasks. I am passionate about contributing to the cybersecurity community by developing open-source security tools and sharing my learnings through detailed write-ups on various security techniques.

---

## EXPERIENCE

### Cyber Security Technical Lead — ABB  
**Jun 2024 – Present** | *Bengaluru, Karnataka, India · Hybrid*
- **Penetration Testing:** Expert in comprehensive testing across embedded devices, cloud, APIs, mobile apps, and thick clients.
- **Threat Modelling:** Lead thorough threat modelling for products in the design phase.
- **Vulnerability Research:** Specialise in ICS protocol vulnerability research.
- **Subject Matter Expert:** Serve as a Cybersecurity SME and mentor emerging talent.
- **Scrum Master:** Manage team planning and effort monitoring duties.
- **Compliance & Audit:** Drove successful audits for ISO 27001:2013 and IEC 62443-4-1:2018 certifications.
- **Innovation:** Explore AI applications in cybersecurity and identify zero-day vulnerabilities in third-party products.

### Senior Cyber Security Engineer — ABB  
**Nov 2021 – Jun 2024**
- Firmware Analysis & Threat Modelling
- Penetration Testing
- Security Proof of Concepts
- Handling Scrum Activities

### Cyber Security Engineer — ABB  
**June 2020 – Oct 2021**
- Threat modelling
- Penetration testing of ICS systems
- DevSecOps

### Cyber Security Intern — ABB  
**June 2019 – May 2020**
- Penetration testing of Embedded Systems
- Fuzzing protocols

### Intern — Cyber Cell Ahmedabad  
**Jan 2019 – March 2019**
- Worked on multiple ongoing cases.
- Helped with OSINT activities.

---

## PROJECTS

### TimeHammer: NTP Security & Fuzzing Tool
- Repo: https://github.com/neutrinoguy/timehammer
- Cross-platform Network Time Protocol (NTP) security and resilience testing suite in Go for IoT and embedded devices. Features an interactive terminal UI (TUI) to simulate time spoofing, Kiss-of-Death packets, client fuzzing, and Y2K38 rollovers.

### VoidProbe: Real-Time Embedded Security & DoS Assessment Tool
- Repo: https://github.com/neutrinoguy/VoidProbe
- Real-time monitoring and security assessment tool in Go for Linux-based embedded systems. Assesses devices against IEC 62443-4-2 Denial of Service (DoS) Resistance and Resilience to Resource Management (DRRM) requirements via lightweight SSH telemetry agents.

### Devicestats: Drozer module to extract device information  
- Repo: https://github.com/neutrinoguy/devicestats  
- Drozer module to extract device information during Android mobile application penetration tests.

### Awesome-ICS-Writeups — *Jun 2022*
- Repo: https://github.com/neutrinoguy/awesome-ics-writeups
- Collection of ICS/SCADA security writeups, offensive techniques, architecture guides, and threat assessments.

### Honeypot over Cloud with Analytics using ELK
- Cowrie, adbhoney over GCP with real-time Elasticsearch, Logstash, Kibana analytics.

---

## CERTIFICATIONS
- ISA/IEC 62443 Cybersecurity Expert (All four certifications completed)  
- CEH (Certified Ethical Hacker) v13  
- Docker Certified Associate  
- AZ-900: Azure Fundamentals  
- Achilles Certified Tester  

---

## TECHNICAL SKILLS
**AI & Frontier Security:** LLM Red Teaming, Adversarial Machine Learning, Prompt Injection Defense, Model Hardening, Guardrails Engineering  
**Industrial & Embedded Security:** ICS/SCADA, Modbus, DNP3, PROFINET, Firmware Reverse Engineering (Ghidra, IDA Pro, Binwalk), Hardware Debugging (JTAG, UART, SPI)  
**Programming Languages:** Go, Python, C, Bash, PHP  
**Web & Cloud:** HTML, CSS, JavaScript, GCP, Azure, Docker  
**Databases:** MySQL, MongoDB  
**Tools:** Burp Suite Professional, Metasploit Framework, Wireshark, Drozer  
**Operating Systems:** Windows Server/CE, macOS, Linux (Ubuntu, Kali, Parrot, BlackArch), RTOS  

---

## ACHIEVEMENTS
- Reported multiple CVEs: CVE-2022-22987, CVE-2023-24181, CVE-2023-24182
- Acknowledged by United Nations, Sony, Alibaba, Opera, Sophos, Honeywell, Naver, Intel, ForgeRock, Prezi, NCIIPC India, Dutch Government
- Multiple Awards: X-Tra Miler and Star Performer at ABB
- Top 50 — Nullcon HackIM CTF 2019  
- Top 3 India — Pragyan CTF 2017  

---

## OPEN SOURCE CONTRIBUTIONS
- Content Contributor to **MITRE ATT&CK for ICS** (Technique T1694/002: Hardcoded Credentials)
- Contributor to CVSS 4.0 SIG & MITRE ICS/OT SIG
- Added CSAF feeds to Vulnerability Lookup Project by CIRCL
- Open Source Contributor (EMBA, Photon, Reconnoitre)

---

## EDUCATION
**M-Tech Cyber Security & Incident Response** (2018–2020) — NFSU (CGPA: 7.5)  
**B.Tech Computer Engineering** (2014–2018) — GTU (CGPA: 7.89)