Harshit Ramesh Arora

Harshit Ramesh Arora

About

Detail

Bengaluru, Karnataka, India
Contact Harshit regarding: 
groups
Networking

Timeline

work
Job
school
Education
folder
Project

Résumé

Jobs verified_user 0% verified
  • ShopBack
    Product Security Engineer
    ShopBack
    Jun 2025 - Dec 2025 (7 months)
    • AppSec & SAST: Spearheaded an AI-powered SAST rollout across 39 repositories and embedded OWASP practices into the SDLC, proactively remediating 2 critical vulnerabilities pre-production and reducing long-term security debt.
    • Pipeline Automation: Engineered and optimized GitLab CI/CD pipelines by integrating Upwind CNAPP, ensuring continuous security monitoring for cloud workloads without impacting deployment velocity.
    • Secret Management: Architected CommitCat Manager to provide centralized visibility, successfully automating the detection and remediation of 100+ hardcoded secrets across multiple engineering projects within 1 month.
  • C
    VAPT Intern
    CyRAACS
    Aug 2024 - Feb 2025 (7 months)
    • Offensive Assessments: Executed comprehensive Web Application and API penetration tests for enterprise clients, identifying 3+ CVEs and 10+ OWASP Top 10 Vulnerabilities.
    • Cross-Functional Triage: Partnered with IT Infrastructure teams to patch vulnerabilities (decreasing MTTR by 30%).
    • Compliance Reporting: Developed CERT-In compliance reports to ensure organizational adherence to national cybersecurity frameworks.
  • S
    Security Researcher
    Nov 2023 - Current (3 years)
  • A
    Network Security Intern
    AICTE – EduSkills
    May 2023 - Jul 2023 (3 months)
    • Earned Fortinet NSE 1, 2, and 3 certifications, mastering core concepts in network security, threat assessment, and security infrastructure.
    • Analyzed Blue Team methodologies, gaining practical knowledge of SIEM, SOAR, EDR, XDR, and firewall management.
    • Developed hands-on skills in network threat mitigation, vulnerability management, and incident response procedures.
Education verified_user 0% verified
  • A
    Bachelor of Engineering in Computer Science
    AMC College of Engineering, Bengaluru
    Aug 2019 - Jun 2023 (3 years 11 months)
  • P
    High School Degree
    Presidency School, Bengaluru
    May 2017 - Mar 2019 (1 year 11 months)
Projects (professional or personal) verified_user 0% verified
  • J
    JSner - Endpoint Extractor
    Jan 2025 - Current (1 year 10 months)
    • Developed a client-side JavaScript/Python reconnaissance tool with an automated crawler to map attack surfaces, uncover hidden APIs, and extract sensitive configuration paths in real-time.
    • Engineered an auto-deduplication engine and seamless JSON/TXT data export pipeline, significantly accelerating the vulnerability triage process for penetration testers and bug bounty hunters.
    • Ensured strict data privacy and operational security (OPSEC) by executing all parsing and analysis entirely client-side, eliminating external data exposure risks.