// CLASSIFIED SUMMARY
I'm Nisarg Chasmawala — codename HEAVEN — an award-winning Offensive Security Engineer, elite Penetration Tester, and Red Team Operator with a proven track record of securing complex enterprise and cloud environments. Indian-origin, now UK-based as an international postgraduate student, currently pursuing an MSc in Cyber Security with Professional Placement at Birmingham City University, England, UK (expected March 2027). I uniquely fuse rigorous vulnerability assessment with cutting-edge AI & Machine Learning threat intelligence — I don't just run scans, I architect the offensive tooling that runs them autonomously.
// OFFENSIVE TRADECRAFT — CPENT-certified across the full attack chain: external/internal infrastructure penetration testing, network exploitation, Active Directory abuse, web & REST API attacks, cloud (AWS IAM) privilege escalation, OSINT, and digital forensics. In live MSc engagements I chained CVSS 10.0 RCE exploits against Redis, Openfire, and Gitea — pivoting from replication abuse and admin console exploitation through Git Hooks weaponisation to obtain system-level access.
// GenAI-AUGMENTED TOOLING — I leverage Large Language Models and Generative AI as a force multiplier to architect, script, and rapidly deploy custom offensive tools. My flagship — HEAVEN — is a production-grade autonomous penetration testing framework featuring an extensible suite of specialised modules, deterministic false-positive suppression, an autonomous AI attack-chain planner with an observe-plan-act loop and offline credential-free fallback, a multi-feature ExtraTreesRegressor model for real-time CVSS v3.1 prioritisation via EPSS & CISA KEV, MITRE ATT&CK / Cyber Kill Chain / OWASP mapping, and a scalable PostgreSQL backend. Alongside it, HEAVEN-GeoIntel — an offline-first, zero-dependency Next.js OSINT platform unifying 5 telemetric identifiers, correlating bundled datasets with free-tier intelligence and automating credential breach & info-stealer analysis with absolute OPSEC and no commercial API keys.
// CLEARANCE — CPENT · CEH Master · CHFI (90.7%) · ISO 27001:2022 & 27701:2025 LA · CRTOM · CLLMSP · 21 total certifications · 8 live offensive/ML deployments on GitHub. 🏆 1st Place — BCU Cyber Security Society Hackathon (STEAMhouse, UK) · 🥈 Runner-Up — BCU AI Hackathon 2026 · 🏅 Top 5 Finalist — Unihack 2026.