Munish Kharb

CEO

Bengaluru, Karnataka, India5 yrs 10 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in penetration testing and vulnerability assessment.
Led security reviews for major healthcare acquisitions.
Proficient in multiple security tools and frameworks.

Stackforce AI infers this person is a Cybersecurity Specialist with a focus on Healthcare security solutions.

Contact

Skills

Core Skills

Api SecurityCloud SecurityPenetration TestingSecurity ImplementationProduct Security

Other Skills

AWSAmazon Web Services (AWS)Android SecurityApplication SecurityAutomationBashBurp SuiteBurp Suite ProfessionalC (Programming Language)CommunicationDASTDevSecOpsDocker ProductsDrozerEthical Hacking

About

As a senior security engineer at Connect and Heal - CNH Care, I work with a team of experts to ensure the security of all company products and services, including web and mobile applications, and REST APIs, that provide multi-tenant enterprise solutions for the healthcare sector. I conduct comprehensive penetration testing and security evaluations, using various tools and standards, and provide recommendations and remediations for any vulnerabilities identified. I also lead the security review for key acquisitions, such as Thyrocare and Aknamend, establishing security benchmarks and integration standards for their products and services. I have over four years of experience in web application security, mobile security, vulnerability assessment, AWS cloud security, and API security, having worked previously at PharmEasy and Acadbee. I have in-depth knowledge of OWASP Top 10, and proficiency in using tools such as Burp Suite, ZAP proxy, POSTMAN, Nmap, Docker, SQLmap, Frida, Drozer, Mobsf, scoutesuite and cloudfox. I am also proficient in python and automation. I am passionate about learning more about cyber security fields, especially container security. I hold a Bachelor of Technology in Computer Science from The NorthCap University. I love history, hacking, and business logic bugs.

Experience

Connect and heal - cnh care

2 roles

Lead Security Engineer

Sep 2025 – Present · 6 mos

Senior Security Engineer

Jan 2023 – Oct 2025 · 2 yrs 9 mos

DevSecOpsAmazon Web Services (AWS)shift leftAPI SecurityApplication SecurityMobile Security+7

Pharmeasy

Information Security Engineer

Aug 2021 – Jan 2023 · 1 yr 5 mos · Bangalore Urban, Karnataka, India

Conducted comprehensive penetration testing and security evaluations across all company products and services, including web and mobile applications (Android and iOS), and REST APIs in both production and development settings, focusing on multi-tenant enterprise solutions. Achieved full ownership in numerous assessments.
Investigated and validated POCs for leading security tools like BurpSuite Enterprise, TruffleHog, Qualys, and Nuclei, steering their integration into the security workflow.
Led the inaugural security review for key acquisitions, including Thyrocare (B2B) and Aknamend (SaaS), establishing security benchmarks and integration standards.
Managed the prioritization of vulnerabilities identified in external penetration tests, enhancing remediation efficiency and security response

API securityVulnerability AssessmentAndroid SecurityPython (Programming Language)Penetration TestingAmazon Web Services (AWS)+17

Acadbee

2 roles

Security Engineer

May 2020 – Aug 2021 · 1 yr 3 mos

Manually Perform Penetration Testing and vulnerability assessment for web applications and API Testing
Have exposure on penetration testing bypasses on JWT, CORS, XSS, CSRF, IDOR, Privilege Escalations, SSRF, Path traversal, XXE, Cookies attributes, LFI, RFI, account takeover logics.
Mobile App Security : Static code Analysis through MobSF, Drozer and Frida framework, API testing, Insecure Authorization and authentication, IDOR, Insecure data storage, reverse engineering, improper session handling , content Providers based vulnerabilities.
Work with program teams and provide secure coding practice.
Automation using Python

Ethical HackingCommunication

Security Engineer

Mar 2020 – Apr 2020 · 1 mo

Worked as a Security Researcher Intern with the engineering team. My work role included finding vulnerabilities and business logic bugs in the web application and providing a detailed report.