Hrishikesh Nate
Mumbai, Maharashtra, India
Security Engineer with 7+ years of experience in application security, secure SDLC, cloud security, DevSecOps automation, and AI security. Proven expertise in designing security frameworks, integrating security tools, and leveraging AI for vulnerability detection and threat intelligence.
Experience
Associate Cyber Security EngineerTIAA, Mumbai
Oct 2023 – Present- Designed secret remediation automation across GitHub, GitLab, and Bitbucket — reducing exposed credential risk by 85%
- Conducted end-to-end security assessments of 100+ applications in AWS and containerized environments
- Integrated DAST tools (ZAP, Nuclei, Burp Suite Enterprise) into CI/CD pipelines across 30+ applications
- Built ML-based anomaly detection for API traffic, reducing false positives by 40% using Traceable.ai
- Developed AI-assisted vulnerability prioritization using NLP to analyze CVE descriptions and assign risk scores
- Created security controls for AI/ML models including adversarial attack detection for LLM applications
Senior Security EngineerPaytm, Bangalore
Jul 2021 – Oct 2023- Built AWS Route 53 security analysis tool for subdomain takeover detection across 1000+ hosted zones
- Created GitHub Crawler and Spyonic frameworks, increasing vulnerability detection coverage by 50%
- Automated CVE matching via OpenCVE and Qualys APIs — reducing mean patch time from 5 days to 2 days
- Implemented ML model for false positive reduction in SAST findings, improving developer productivity by 35%
- Trained 5+ engineering teams on secure coding practices and OWASP guidelines
Senior Security ExecutiveJustdial, Bangalore
Jul 2018 – Jul 2021- Performed web and API penetration testing for 10+ critical platforms — SQL injection, XSS, auth bypasses
- Conducted security testing for Maharashtra state government websites
- Developed OSINTORK toolkit for OSINT investigations used by law enforcement agencies
- Automated IP-based threat response with Python and SIEM integration, cutting incident response time by 40%
Key Projects
VulnReach
Founder and maintainer of open-source vulnerability intelligence platform.
S3 Security Self-Assessment Slack App
Automated compliance checker for AWS S3 configurations, serving 100+ users.
AI Model Security Scanner
Automated security testing tool for ML models — adversarial vulnerabilities and data leakage detection.
Certifications
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- Certified Red Team Professional (CRTP)
- Certified Ethical Hacker v10 (CEH) — EC-Council
- Cisco Certified Network Associate (CCNA)
- Cisco Certified Network Professional (CCNP) — Security
Skills
SAST / DAST / IASTPenetration TestingOWASP Top 10API SecurityAWS SecurityDocker / KubernetesDevSecOpsCI/CD IntegrationLLM SecurityML-based Threat DetectionBurp SuiteNucleiPythonBashThreat Modeling (STRIDE)CVE AnalysisSonarQubeSnyk
Education
B.E. in Electronics and TelecommunicationsMumbai University
2018