Open to opportunities

Soham Khardikar

@sohamkhardikar

Security researcher and bug hunter finding high-severity cloud and application vulnerabilities, validated through responsible disclosure.

India

Message

What I'm looking for

I’m looking for a security role where I can perform real-world application and cloud vulnerability research, ship proof-of-concepts responsibly, and integrate testing into CI/CD—backed by teams that value vendor collaboration and measurable remediation.

I’m a security researcher and bug hunter focused on discovering real, high-severity vulnerabilities in production systems and turning them into actionable, vendor-validated findings. My work spans manual source-to-sink review, building proof-of-concept exploits, and writing clear technical reports that drive concrete remediation.

Highlights include a critical (CVSS 9.6) cross-tenant authorization bypass in a Kubernetes Cloud Controller Manager, where I reproduced multiple independent vectors from one root cause and delivered a full proof-of-concept test suite in Go. I also identified a command injection vulnerability in a production Kubernetes CLI (fixed in v1.5.4), and I’ve built security automation such as a Semgrep-based CI vulnerability scanner and practical DevSecOps integrations via GitHub Actions.

Experience

Work history, roles, and key accomplishments

OT Security Intern

Adani Electricity Mumbai Limited (AEML)

May 2026 - Jul 2026 (2 months)

Assessed OT/IT segmentation against the Purdue Model to identify DMZ firewall and ISO 27001 compliance gaps, validating findings via SCADA switching and IEC-104 telemetry analysis.

OT IT Segmentation ISO 27001 IEC 104 Telemetry Analysis

Freelance Developer

Enarv

Mar 2026 - May 2026 (2 months)

Engineered a Next.js admin dashboard for content moderation and automated AWS S3 deployments using GitHub Actions to reduce deployment time.

Next.js S3 GitHub Actions CI CD Content Moderation

Full Stack Developer Intern

VFS.global

Jun 2025 - Aug 2025 (2 months)

Architected a Master Data Management (MDM) application in Node.js and Go with secured internal data pipelines, scaling relational mapping to thousands of employees.

Node Go Master Data Management (MDM)Data Pipelines

Security Monitoring Intern

CDAC, Noida

Jan 2024 - Feb 2024 (1 month)

Deployed automated Nagios monitoring with custom alerting across Linux nodes to provide administrators real-time infrastructure security visibility.

Nagios Monitoring Alerting Linux Systems Infrastructure Security

Education

Degrees, certifications, and relevant coursework

National Forensic Sciences University

Integrated B.Tech–M.Tech, Computer Science & Engineering (Cyber Security)

2023 - 2028

Grade: CPI: 8.52

Activities and societies: Technical Core Team, AI/ML Club (NFSU): led workshops and mentorship programs in AI and cybersecurity; hosted capture-the-flag events and hackathons; competed in multiple CTF categories.

Integrated B.Tech–M.Tech in Computer Science & Engineering (Cyber Security) at National Forensic Sciences University, Gandhinagar from 2023 to 2028. Achieved CPI 8.52 and led AI/ML club workshops, mentorship, and cybersecurity events on campus.