Shubham Singla

Security Operations Centre Operator · Cybersecurity Professional

Melbourne, VIC, Australia · contact@shubhamsingla.tech · +61 416 168 258

shubhamsingla.tech · github.com/CyberShubhs · LinkedIn

Summary

I work as a Security Operations Centre Operator at NAB, handling security calls and supporting clients and security systems. My work at Web Alive gave me hands-on experience in web application testing and vulnerability assessment. Based in Melbourne and open to cybersecurity roles. I also founded Yarra Secure.

Experience

Security Operations Centre Operator · NAB SOC

Feb 2024 - Present · Docklands, VIC
  • Managed over 150 calls daily, ensuring timely and effective response to security incidents.
  • Actioned tickets based on client needs, improving response times by 20%.
  • Provided technical support for security systems, enhanced functionality, and reliability.
  • Delivered excellent customer service, addressing client inquiries and concerns.
  • Implemented and monitored security protocols, resulting in a safer environment.

Founder · Yarra Secure

Oct 2025 - Present · Melbourne, VIC
  • Founded a cybersecurity business supporting Australian small businesses with practical security reviews and remediation guidance.
  • Develop security assessment workflows, plain-English reports, email and invoice-fraud controls, and staff awareness resources.
  • Manage service design, scoping, and client communication, keeping assessment boundaries and approvals clear.

Cyber Security Analyst · Web Alive

June 2025 - Oct 2025 · South Yarra, VIC
  • Performed web app security testing on Web Commander, Events Booking, Exsited ERP, and Reed Events using Burp Suite Pro and manual testing (SQL, XSS).
  • Conducted data access control checks across role-based views in Events Booking.
  • Used Kali tools for directory, brute-forcing, and HTTP header analysis.
  • Ran Nessus scans to identify vulnerabilities across WebAlive's network.
  • Performed server setup with XCP-ng, Proxmox and VM creation on Rocky Linux 9.
  • Performed API testing using Postman and performed manual testing.

Education

Bachelor of Networking (Cybersecurity) · Melbourne Institute of Technology · December 2024

Skills

Cybersecurity Operations: Incident Response, Threat Detection, Risk Assessment, Compliance, Mobile Testing

Technical Skills: Penetration Testing, Vulnerability Assessment, Web App Security (Burp Suite), Linux Administration, API Testing

Development & Tools: Scripting & Automation, iOS (Swift/SwiftUI), Virtualisation (Proxmox, XCP-ng), Version Control (Git), Network Configuration, SDLC Awareness

Certifications

CompTIA Security+ (SY0-701): In progress — studying, with each exam domain practised hands-on in my home lab

Selected Projects

ScamChecker

scamchecker.app

Scam analysis used by 1,000+ people, with an anonymous web scanner and iOS and Android apps. Explains the warning signs behind each risk verdict.

Security Home Lab

View case study

An isolated Proxmox lab for vulnerability management, product testing, and Security+ practice. Rocky Linux targets, Kali tooling, and snapshots support repeatable exercises.

ConverterHub

converterhub.dev

Browser-based tools for JSON, timestamps, Base64, CSV, and everyday developer tasks. Conversion inputs are processed locally, with no account required.

Workout and macro tracker available on iPhone and Android. Built for quick logging between sets, with local storage and no app account required.