Offensive Security
Web, API, mobile, thick client, network, IoT and red-team style assessments.
WebAPIMobileThick ClientNetworkIoTRed Teaming
Senior Information Security Consultant
SECURITY
WITHOUT
BLIND SPOTS.
Offensive Security × Architecture × AI Security
I work across offensive security, application security, network security architecture, vulnerability management, governance, and AI security — then turn technical findings into practical decisions for engineering and leadership teams.
Web / API / MobileSource Code ReviewNetwork ArchitectureRed TeamingAI / LLM SecurityRisk & DLP
4+Years Experience
06Practice Areas
07Certifications
∞Curiosity Driven
SECURITY / RESEARCH / ADVISORYMumbai, India
⌁
◈
✦
01 / Practice Areas
Broad enough to advise.
Technical enough to test.
Application Security
Source-code review, SAST/SCA, secure SDLC and application design review.
Source Code ReviewSASTSCASecure SDLCApplication Architecture
Security Architecture
Network architecture, segmentation, security design, trust boundaries and threat modeling.
Network Architecture ReviewSecurity Design ReviewSegmentationThreat Modeling
Vulnerability Management
Exposure management, VA, remediation tracking, metrics and technical reporting.
VAExposure ManagementRemediationMetricsTracking
Governance & Risk
DLP, risk assessment, audit support, compliance alignment and security governance.
DLPRisk AssessmentAudit SupportComplianceSecurity Governance
AI Security
LLM security, prompt injection, RAG security, agent security, data leakage and AI red teaming.
LLM SecurityPrompt InjectionRAG SecurityAgent SecurityAI Red TeamingData Leakage
02 / Experience
Professional experience
with technical depth.
Apr 2025 — Aug 2026
01Cyber Security Consultant
ProTechmanize · Full-time
Thane, Maharashtra, India · On-site
Cybersecurity Consultant deployed at Aditya Birla Capital, delivering offensive security and application security engagements across enterprise environments.
- Conducted Web, API, and Mobile Application Penetration Testing for critical business applications.
- Performed Secure Source Code Reviews to identify and validate security vulnerabilities.
- Executed Red Team engagements to assess the organization’s real-world security posture.
- Managed and secured CI/CD pipelines, integrating security practices into the software development lifecycle (DevSecOps).
- Supported and handled RBI Security Audit activities, including security assessments, remediation validation, and compliance coordination.
Jan 2023 — Mar 2025
02Associate
Asynk · Full-time
India · Remote
- Performed Vulnerability Assessments (VA) to identify and prioritize security weaknesses.
- Conducted Web Application Penetration Testing for enterprise and customer-facing applications.
- Executed API Penetration Testing to assess authentication, authorization, and business logic vulnerabilities.
- Performed Mobile Application Penetration Testing on Android and iOS applications.
- Conducted Network Penetration Testing across internal and external infrastructure.
- Performed Secure Source Code Reviews to identify security flaws and provide remediation recommendations.
Nov 2022 — Dec 2022
03Intern
KaaShiv InfoTech · Internship
Mumbai, Maharashtra, India · Remote
Aug 2021 — Sep 2021
04Intern
Verzeo · Internship
Mumbai, Maharashtra, India · Remote
03 / Research & Writing
Technical work worth
publishing properly.
Before the AI Answers: Testing Customer Data Isolation in a Banking RAG Pipeline
Can a banking AI assistant retrieve useful information without exposing another customer’s records? A controlled experiment explores how access filtering affects data privacy and retrieval coverage in a RAG pipeline.
AI SecurityRAG SecurityLLM SecurityBanking
Read full article →Lab Note28 Sept 2026
Testing Customer Data Isolation in a Banking RAG Pipeline
A Python experiment comparing three retrieval designs to examine how access filtering affects customer privacy and the availability of relevant records.
RAG SecurityAI SecurityBankingNBFC
ResearchRead article →
Blog27 Sept 2026
Before the AI Answers: Testing Customer Data Isolation in a Banking RAG Pipeline
Can a banking AI assistant retrieve useful information without exposing another customer’s records? A controlled experiment explores how access filtering affects data privacy and retrieval coverage in a RAG pipeline.
AI SecurityRAG SecurityLLM SecurityBanking
AI SecurityRead article →
Blog20 Sept 2026
AI Security in Banking and NBFCs
How can banks and NBFCs use AI to strengthen cybersecurity while defending against AI-powered threats? Explore deepfake fraud, prompt injection, data leakage and AI agent security, with practical controls, a secure loan-review workflow and a 90-day adoption plan.
AI Security Banking SecurityNBFCGenerative AI
AI SecurityRead article →
Blog
How to Get Into Cybersecurity: A Comprehensive Roadmap.
Open the article to read more.
SecurityRead article →
Blog
Episode 2: The Art of Recon - Finding What Others Miss
Open the article to read more.
SecurityRead article →
Blog
Pickle Rick: CTF Challenge | Write-Up
Open the article to read more.
SecurityRead article →
04 / Certifications
Major certifications up front.
More in a slider.
CRT
MajorCertified Red Team Operator
CRTO
Zero Point Security
Core credential01
EJP
MajoreLearnSecurity Junior Penetration Tester
eJPT
INE
Core credential02
CEH
MajorCertified Ethical Hacker
CEH
EC-Council
Core credential03
CRT
AdditionalCertified Red Team Analyst
CRTA
CyberWarFare Labs
Specialization04
CRT
AdditionalCRTOM
Red Team Leaders
Specialization05
CSC
AdditionalCSCRB
Red Team Leaders
Specialization06
AI
AdditionalCertified LLM Security Expert
LLM
Red Team Leaders
Specialization07
05 / Let's Connect
Have a security problem
worth solving?
For opportunities, consulting, security research collaboration, technical discussions or speaking requests — send me a message.
Emailharshadpawar69@gmail.com
LocationMumbai, India
FocusSecurity roles · Consulting · Research