Prableen Dhooper

Available now for SOC and security analyst roles

Prableen Dhooper

Cyber security analyst, Calgary

I find and fix weaknesses before attackers can use them. I've exploited and defended Windows, Linux and Active Directory labs, built my own threat-analysis tools in Python, and spent four years investigating theft and fraud in physical security.

Contact me Download resume
prableen@kali: ~ 
$ whoami
prableen_dhooper · cyber security analyst · Calgary, AB
$ cat profile.txt
education ....... SAIT Cyber Security Diploma (Aug 2026)
also ............ Software Development Diploma, Bow Valley
field exp ....... 4+ yrs loss prevention & investigations
languages ....... EN · HI · PA · UR
$ nmap -sV prableen.local
PORT      STATE  SERVICE
22/tcp    open   penetration-testing
80/tcp    open   vulnerability-assessment
443/tcp   open   network-security
514/udp   open   log-analysis / incident-response
8080/tcp  open   python-security-tooling
Nmap done: 1 analyst up · ready to hire
$
  • 14detection modules built into PhishProbe
  • 15+security tools used hands-on
  • 4+ yrsinvestigating theft, fraud and incidents
  • 4languages: English, Hindi, Punjabi, Urdu

From the loading dock to the SOC

Before I studied cyber security, I was already doing security work. As a loss prevention coordinator at DB Schenker, I watched for suspicious activity, investigated internal fraud, audited controls and trained staff to spot threats.

At SAIT I moved that mindset onto networks and systems. I've attacked lab environments to understand how breaches happen, then used logs, Sysmon and Autoruns to trace exactly what the attacker left behind. My software development diploma means I don't just run tools; I build them.

I'm looking for a team where I can monitor, investigate and respond, and keep learning toward senior analyst and penetration testing work.

Skills that carry over

Loss preventionCyber security
Monitoring facility activity for theftAlert triage and security monitoring
Investigating employee and vendor fraudIncident investigation and insider threat
Compliance and safety auditsControl audits and PCI-DSS compliance
Anti-theft training for staffSecurity awareness training
Responding to alarms and escalationsIncident response procedures

Toolkit

Tools I've used in hands-on labs and projects, grouped by what they're for.

Recon and scanning

  • Nmap
  • Nessus
  • OpenVAS
  • Nikto
  • Wireshark

Exploitation

  • Metasploit
  • Burp Suite
  • Aircrack-ng
  • impacket
  • Kali Linux

Defence and hardening

  • pfSense
  • IPsec VPN
  • Firewall rules
  • Network segmentation
  • Active Directory
  • Windows Server

Detection and forensics

  • Sysmon
  • Event Viewer
  • Autoruns
  • Log analysis
  • Digital forensics

Programming

  • Python
  • Flask
  • SQLite
  • Multithreading
  • Bash
  • C#
  • SQL

Cryptography and compliance

  • AES
  • RSA
  • ECC
  • SHA-256
  • PCI-DSS
  • Risk management

Where my work maps to industry frameworks

The labs and projects below, lined up against the frameworks security teams actually use.

NIST Cybersecurity Framework 2.0

Govern

Compliance and safety audits; PCI-DSS controls; security policies and procedures

Identify

Vulnerability scans with Nessus and OpenVAS; CVE matching; risk scoring in PhishProbe

Protect

pfSense firewalls, IPsec VPN, network segmentation; encryption; staff awareness training

Detect

Sysmon and Event Viewer monitoring; SSH log monitor; Mosaic EDR; phishing URL detection

Respond

Tracing attacker artifacts and persistence; fraud investigations; alarm and escalation response

MITRE ATT&CK techniques practised in labs

TacticTechniqueID
DiscoveryNetwork service discoveryT1046
Initial accessExploit public-facing applicationT1190
ExecutionCommand and scripting interpreterT1059
Privilege escalationBypass user account controlT1548.002
Privilege escalationExploitation for privilege escalationT1068
Lateral movementExploitation of remote servicesT1210
Lateral movementSMB / Windows admin sharesT1021.002
Credential accessNetwork sniffingT1040
Credential accessPassword crackingT1110.002
Persistence (detected)Boot or logon autostart executionT1547

OWASP Top 10 categories tested

  • A01
    Broken access controlCross-site request forgery (CSRF)
  • A03
    InjectionSQL injection and cross-site scripting (XSS)
  • A06
    Vulnerable and outdated componentsOutdated jQuery exposing XSS, confirmed with Metasploit

Projects and lab work

Built and tested during the SAIT Cyber Security program.

Featured tool

PhishProbe: URL security analyzer

Tells you whether a link is safe to click, and exactly why.

Problem
Phishing links are the most common way into an organization, and users can't judge a URL by looking at it.
What I built
A 14-module Python analyzer that checks phishing indicators, domain age, SSL certificate validity, open ports and malicious redirect chains, then combines the results with a weighted scoring algorithm into a percentage risk and a verdict: safe, suspicious or dangerous.
Interface
Flask web app with live scan progress, a results dashboard and scan history stored in SQLite.
Output
Automatic reports in text, JSON, HTML and PDF. Deployed and tested on Kali Linux.
  • Python
  • Flask
  • SQLite
  • Nmap
  • Nikto
  • Threading
Target http://secure-login-verify.example
0%

Dangerous

Example result · 14 checks

  • Domain age
  • SSL certificate
  • Redirect chain
  • Open ports
  • Lookalike domain
  • URL length
  • IP-based host
  • Subdomain depth
  • Login keywords
  • Web server scan
  • URL shortener
  • Special characters
  • HTTPS usage
  • Form targets

Offensive lab

Penetration testing and vulnerability assessment

A full attack chain across Windows, Linux, web and wireless targets: find it, prove it, then trace it from the defender's side.

  1. Scan

    Ran Nessus and OpenVAS against Windows and Linux hosts to find high-severity issues, including SMB vulnerabilities and outdated jQuery.

  2. Validate

    Confirmed findings with Metasploit to separate real risk from scanner noise.

  3. Exploit

    Exploited XSS, CSRF and SQL injection with OWASP methods; cracked WEP, WPA and WPA2 after capturing 4-way handshakes.

  4. Escalate and move

    UAC bypass, privilege escalation and reverse shells on Windows, then lateral movement through Active Directory with impacket-smbexec.

  5. Investigate

    Switched sides: used Sysmon, Event Viewer and Autoruns to find the attacker's artifacts and persistence mechanisms.

  • Nessus
  • OpenVAS
  • Metasploit
  • Burp Suite
  • Aircrack-ng
  • impacket
  • Sysmon
  • Autoruns

Defensive lab

Segmented network with pfSense and IPsec

  • Built a multi-network lab, separating networks with pfSense firewall rules and segmentation policies
  • Linked sites with IPsec VPN tunnels so traffic between them stays encrypted
  • Used the segmented environment as the target for Active Directory lateral movement testing
  • Decrypted captured Zigbee IoT traffic in Wireshark by extracting and applying the network key
Lab topology: an attacker network and two segmented internal networks connected through a pfSense firewall, with an IPsec tunnel to a remote site. Kali Linuxattacker net pfSensefirewall · segmentation AD domainWindows ServerWindows clients Linux / webvulnerable targets Remote site IPsec
Simplified lab topology

Detection

Mosaic: EDR platform

An endpoint detection and response platform built to detect threats on endpoints.

Automation

Security monitor and CVE checker

A multithreaded Python monitor that analyzes SSH logs and Nmap results, plus a CVE checker that matches Nmap scan output against a CVE database to flag known vulnerabilities.

Cryptography

Applied cryptography

Implemented and compared AES, RSA, ECC and SHA-256 for confidentiality, integrity and digital signature workflows.

Experience

Years of spotting risk, investigating incidents and protecting people and assets.

  1. Feb 2024 – Aug 2025

    Loss Prevention Coordinator

    DB Schenker · Rocky View, AB

    • Monitored inventory and facility activity to catch and prevent loss, working with security teams on theft and fraud
    • Investigated internal theft and fraud involving employees and vendors, and reported findings to management to drive corrective action
    • Ran regular compliance and safety audits and put procedures in place to protect company assets
    • Trained staff on anti-theft techniques and security awareness
    • Responded to alarms and escalations following emergency and incident response policy
  2. Nov 2020 – Apr 2023

    Senior Sales Associate

    7-Eleven · Calgary, AB

    • Led shifts in the manager's absence, covering operations, cash handling and staffing
    • Trained new associates on procedures, safety and loss prevention
    • Watched for theft and safety hazards and enforced age-restricted sales rules
    • Ran inventory audits and stock counts to reduce shrink

Education

Completed August 2026

Cyber Security Diploma

Southern Alberta Institute of Technology (SAIT), Calgary

Penetration testing, vulnerability assessment, network security, digital forensics, cryptography, incident response and risk management.

Completed August 2021

Software Development Diploma

Bow Valley College, Calgary

Object-oriented programming in C#, relational database design in MySQL, network simulation in Cisco Packet Tracer, and responsive web apps in React.

Let's talk

Hiring for a security role? I'll reply within two business days.

Roles I'm looking for

  • SOC Analyst
  • Security Analyst
  • Vulnerability Analyst
  • Junior Penetration Tester
  • IT Security Analyst
  • OT Security Analyst