Open to opportunities

Rishi Kanwar

@rishikanwar

Message

I emulate real-world threats to validate enterprise, cloud, identity, and AI security controls.

India

Message

What I'm looking for

I'm looking to lead hands-on, threat-informed red team and AI security work, partnering with detection teams to validate controls, improve response, and deliver meaningful remediation outcomes.

I'm a Senior Offensive Security Engineer at Winjit Technologies, working with Schneider Electric to execute threat-informed red team operations across enterprise, AWS, Azure, identity, endpoint, network, and AI/ML environments. I design MITRE ATT&CK-aligned adversary emulation, operate C2 infrastructure, and validate security controls through realistic attack paths.

Previously, I delivered 30+ red team and penetration testing engagements for financial-services and critical-infrastructure clients at Riskberg Consulting. I also test web, mobile, API, and network security, run purple-team exercises, build phishing campaigns, and mentor 50+ engineers.

Experience

Work history, roles, and key accomplishments

Current

Senior Offensive Security Engineer

Current

Winjit Technologies

Sep 2023 - Present (3 years)

Plan and execute hands-on red team operations across enterprise, cloud, identity, endpoint, network, and AI/ML environments. Design threat-informed adversary emulation scenarios aligned to MITRE ATT&CK and run purple-team exercises with SOC teams.

Red Team Operations Cobalt Strike Sliver Mythic Red Teaming Phishing Social Engineering AWS Azure Active Directory Python PowerShell BASH

Security Consultant

Riskberg Consulting Pvt. Ltd.

Jan 2022 - Aug 2023 (1 year 7 months)

Delivered 30+ red team and penetration testing engagements for financial-services and critical-infrastructure clients, including external red team operations, breach & attack simulations, and phishing. Performed advanced Active Directory attacks and application security testing.

Red Teaming Penetration Testing Breach And Attack Simulation Phishing Active Directory Application Security Testing CERT In