_
Penetration Tester | Certified Ethical Hacker (CEH) | Red Team Specialist | Security Researcher
0+
Years Experience
0+
Security Assessments
0+
Security Tools
CEH
Certified
IBM
Current Employer
Web • Mobile
Network Testing
About Me
I'm Harshal Vinod Malkhede, a penetration tester at IBM with 3+ years of hands-on offensive security experience. My work spans enterprise-level security assessments, exploit development, red team operations, digital forensics and incident response — translating deep technical findings into risk decisions that leadership can act on.
I break systems the way real adversaries do: manual, methodical and objective-driven, backed by automation I build in Python and Bash to keep reconnaissance fast and repeatable.
Education & Experience
May 2023 – Present
Enterprise security assessments, exploit development and adversary simulation
2020 – 2023
Tilak Maharashtra Vidyapeeth
Skills & Certification
Certified
EC-Council credential covering ethical hacking methodology, reconnaissance, exploitation, post-exploitation and reporting across enterprise environments.
Services
Deep manual and automated testing against OWASP Top 10 and business logic flaws.
Android and iOS assessments covering storage, runtime, and API layers.
Internal and external network exploitation, pivoting, and AD attack paths.
REST/GraphQL auth, IDOR, rate limiting, and data exposure testing.
Prioritised, risk-scored findings with clear remediation guidance.
Full adversary simulation with C2, evasion, and objective-based operations.
Manual and assisted source review to catch flaws before deployment.
Artifact acquisition, timeline reconstruction, and root cause analysis.
Containment, eradication, and recovery support during active incidents.
Advisory on security posture, tooling, and offensive testing programmes.
Featured Projects
Simulated exploitation of Ghost CMS (CVE-2023-40028), Atlassian Confluence (CVE-2022-26134) and Apache Airflow (CVE-2022-40127), demonstrating unauthenticated RCE, privilege escalation and lateral movement.
Improved security validation by 35%
Designed and executed a full attack lifecycle — phishing, privilege escalation, command & control and data exfiltration — validating SOC monitoring against APT-style attacks.
Improved security readiness by 35%
Reported XSS, SQL Injection, SSRF, IDOR and LFI/RFI issues, completed advanced labs on Hack The Box, TryHackMe and PortSwigger Academy, and built PoC exploits with mitigation guidance.
Improved offensive research capability by 35%
Professional Journey
2020
Tilak Maharashtra Vidyapeeth
2023
Bachelor of Computer Applications
2023
Offensive security team
Present
Enterprise assessments & red teaming
Future
Security Consultant
Contact
Phone
+91 9322531109Location
Pune, Maharashtra, India