Yash Jhanwar
@yashjhanwar
I test web, API, cloud, and GenAI systems to uncover risks and drive practical remediation.
IndiaWhat I'm looking for
At Ernst & Young in Digital Risk Consulting, I execute red teaming, penetration testing, and security advisory engagements across web applications, APIs, cloud environments, and GenAI/LLM systems.
I simulate adversary tactics including phishing, lateral movement, and privilege escalation, then map vulnerabilities to MITRE ATT&CK, CIS Benchmarks, PTES, OWASP, and SANS 25. I also conduct cloud posture and secure configuration reviews across 100+ IPs and 36+ cloud accounts.
Previously at TalaKunchi Network, I contributed to SQUAD1, a vulnerability management product, integrating scanning tools through APIs, plugins, and cURL requests. I translated stakeholder needs into PRDs, user stories, process flows, wireframes, and tested APIs and end-to-end product functionality.
I build practical security tooling and reporting, including a Tableau security findings dashboard and a Python network scanner with subdomain enumeration. I continue developing my offensive security skills through Capture the Flag competitions.
Experience
Work history, roles, and key accomplishments
Executed red teaming engagements and penetration testing across web applications, APIs, and GenAI/LLM systems. Performed secure configuration and cloud posture reviews, and prepared executive-level vulnerability reports.
Business Analyst Intern
TalaKunchi Network Pvt. Ltd.
May 2024 - Sep 2024 (4 months)
Contributed to product development of SQUAD1, a vulnerability management tool, by integrating scanning tools via APIs and coordinating business requirements. Implemented Agile/Scrum methodologies and tested APIs with Postman.
UI/UX Design Intern
Being Ambitious
May 2023 - Jun 2023 (1 month)
Designed a personalized portfolio website for the CEO and co-founder, creating wireframes, prototypes, and conducting user research.
Education
Degrees, certifications, and relevant coursework
Red Team Hacking Pentesting
Attacking and Hacking Active Directory With Kali Linux Full Course, Cybersecurity
Ongoing course on attacking and hacking Active Directory with Kali Linux.
ISC2
Certified in Cybersecurity (CC), Cybersecurity
Ongoing certification in cybersecurity.
UpGradx IIITB
Executive Diploma in Data Science & AI, Data Science & AI
Ongoing executive diploma in Data Science & AI.
Udemy
MITRE ATT&CK Framework, Cybersecurity
Completed a course on the MITRE ATT&CK framework in May 2026.
Mukesh Patel School of Technology, Management and Engineering, NMIMS
B.Tech, Information Technology
Grade: 3.39/4.0
Completed a B.Tech in Information Technology with a CGPA of 3.39/4.0, graduating in May 2025.
Mukesh Patel School of Technology, Management and Engineering, NMIMS
MBA in Technology Management, Information Technology
Grade: 3.39/4.0
Pursued an integrated MBA in Technology Management with a B.Tech in Information Technology, graduating in May 2025.
EY Badges
Data Visualization Bronze Badge, Data Visualization
Earned a Data Visualization Bronze Badge in December 2025.
Udemy
Alteryx Bootcamp, Data Analytics
Completed an Alteryx Bootcamp in August 2025.
Tech stack
Software and tools used professionally
Availability
Location
IndiaAuthorized to work in
Salary expectations
Social media
Job categories
Skills
Interested in hiring Yash?
You can contact Yash and 90k+ other talented remote workers on Himalayas.
Message YashGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
