JEBIN SAMRAJ I

Information Security Analyst specializing in Continuous Asset Discovery, Internet Footprinting, and External Attack Surface Management (EASM). Proven experience in automating reconnaissance workflows using Python, removing Shadow IT, and mapping public-facing infrastructure (DNS/IP arrays). Skilled at taking an attacker’s “outside-in” perspective to monitor assets you don’t own, analyze threat exposures, and enable fast vulnerability triage.

• CompTIA Security+ (Global Information Security Certification)
• Google Cloud Digital Leader (Cloud Concepts & Services)
• Power BI Data Analyst Associate (Microsoft)

1. Automated External Footprinting & Reconnaissance Utility

Key Focus: Python, OSINT, Passive Asset Discovery

• Developed an automated Python recon utility leveraging passive OSINT methodologies and Certificate Transparency logs (crt.sh) to discover and map external-facing subdomains and IP infrastructure.
• Reduced manual analysis effort by ~40–50% by replacing manual DNS checks with programmatic queries, significantly improving baseline discovery speed and consistency.
• Integrated discovery outputs into regular security reporting workflows, enabling rapid triage of newly exposed internet-facing assets.

2. Perimeter Threat Intelligence & Vulnerability Monitoring

Key Focus: Third-Party Threat Intel, Exposure Triage, Risk Prioritization

• Monitored external attack surfaces and threat intelligence feeds across enterprise web domains to proactively identify emerging vulnerabilities and misconfigurations.
• Correlated multi-source vulnerability data with external asset inventories to eliminate duplicate findings and prioritize remediation based on real-world exploitability.
• Tracked cross-functional remediation status, ensuring high-risk perimeter exposures were actively monitored from initial discovery through validated patch resolution.

3. Enterprise Asset Attribution & Reconciliation Framework

Key Focus: Asset Attribution, Data Quality Assurance, Audit Readiness

• Engineered data reconciliation workflows to cross-examine volatile scanner outputs against internal CMDBs, active DNS records, and business owner registries.
• Eliminated "orphan asset" blind spots by identifying data discrepancies across disparate security tools, strengthening the reliability of core security metrics.
• Ensured audit readiness and compliance alignment by maintaining clean, fully attributed asset records for executive reporting and governance reviews.