Security
ScamChecker
Scam analysis used by 1,000+ people, with an anonymous web scanner and iOS and Android apps. Explains the warning signs behind each risk verdict.
Next.jsTypeScriptTailwind CSS
View case study Private sourceVisit website
shubham@soc: ~
Shubham (Sam) Singla
Security Operations Centre Operator · Cybersecurity Professional
I work as a Security Operations Centre Operator at NAB, handling security calls and supporting clients and security systems. My work at Web Alive gave me hands-on experience in web application testing and vulnerability assessment. Based in Melbourne and open to cybersecurity roles. I also founded Yarra Secure.
OPEN TO CYBERSECURITY ROLESMELBOURNE, AU
150+
security calls triaged daily
20%
faster incident response times
1000+
ScamChecker users
Explore the interactive terminal
Type help for commands, then press Enter.
// 01 — EXPERIENCE
Professional Experience
A timeline of my journey in Cybersecurity and IT Operations.
Security Operations Centre Operator
CURRENTNAB SOC
Feb 2024 - PresentDocklands, VIC
- Managed over 150 calls daily, ensuring timely and effective response to security incidents.
- Founded a cybersecurity business supporting Australian small businesses with practical security reviews and remediation guidance.
Cyber Security Analyst
Web Alive
June 2025 - Oct 2025South Yarra, VIC
- Performed web app security testing on Web Commander, Events Booking, Exsited ERP, and Reed Events using Burp Suite Pro and manual testing (SQL, XSS).
// 02 — PROJECTS
Featured Projects
Security tooling, hands-on testing practice, and engineering decisions. Explore how I identify problems, build controls, and test the result.
// 03 — CHALLENGE
Crack the Ciphers
Two challenges for recruiters, analysts, and curious minds: a warm-up transmission, and a three-level operation with an actual coffee at the end.
intercepted-transmission.enc
// ciphertext
V0tIIFNEVlZTS1VEVkggTFY6IEVPWEggV0hEUA==
operation-coffee-run.sh0/3
// operation: coffee run
Three encrypted keys, three techniques. Clear all levels and coffee's on me — seriously.
Level 1 — RECON
An exfiltrated file was encoded before transmission. Recover key 1.
S0VZIDEgT0YgMzogRklSRVdBTEw=
Level 2 — DECRYPT
lockedLevel 3 — FORENSICS
locked// 04 — BLOG
Security Notes
Practical notes on vulnerability assessment, web testing, and security design.
Tools & testing
Reference date: Jul 02, 20253 min read
Nessus: Credentialed Scans and Defensible Findings
Verify scan coverage, interpret severity correctly, and turn evidence into a remediation plan.
Tools & testing
Reference date: Jul 02, 20253 min read
Burp Suite: From Requests to Reproducible Findings
A practical workflow for Proxy, Repeater, Intruder, Scanner, and careful interpretation of Collaborator evidence.
Security practice
Reference date: Nov 27, 20242 min read
Zero Trust: Make the Access Decision Explicit
Connect identities, resource policies, and enforcement to a measurable implementation plan.
// 05 — SKILLS
Core Skills
Tools and technologies I use to secure and build systems.
Cybersecurity Operations
Incident ResponseThreat DetectionRisk AssessmentComplianceMobile Testing
Technical Skills
Penetration TestingVulnerability AssessmentWeb App Security (Burp Suite)Linux AdministrationAPI Testing
Development & Tools
Scripting & AutomationiOS (Swift/SwiftUI)Virtualisation (Proxmox, XCP-ng)Version Control (Git)Network ConfigurationSDLC Awareness