Harsh Nath Jha

Co-Founder

Bengaluru, Karnataka, India6 yrs 9 mos experience
Most Likely To Switch

Key Highlights

  • Expert in building robust security frameworks.
  • Proven track record in vulnerability management.
  • Strong background in cloud and application security.
Stackforce AI infers this person is a Cybersecurity expert with a focus on application and cloud security in the SaaS industry.

Contact

Skills

Core Skills

Application SecurityCybersecurityVulnerability ManagementCloud Security

Other Skills

Burp SuiteCVE ResearchCloudflareIncident ResponseInformation SecurityJavaNetwork SecurityOWASP ZAPPenetration TestingPythonSecure Code ReviewThreat ModelingVulnerability Assessment

About

Unicorn Security Engineer with comprehensive expertise across enterprise security disciplines, including Product Security, Governance, Risk, and Compliance (GRC), IT Infra and Cloud Security. My work centers on building customer trust by delivering robust security frameworks, aligning business objectives and empower organizations to confidently navigate complex regulatory landscapes using my technical depth and strategic insight; ensuring seamless integration of security into every layer of the product. Let's connect :)

Experience

Ema unlimited

Founding Security Engineer

Aug 2024Present · 1 yr 7 mos · Bengaluru, Karnataka, India · Hybrid

  • > Responsible for building InfoSec and customer trust at Ema from the ground up. Shifting left and scaling secure-by-design processes — all in service of a security-first foundation for Ema's Agentic AI Employees redefining the future of work.
Application SecurityPenetration TestingCybersecurityVulnerability AssessmentInformation Security

Elastic

Information Security Engineer

Oct 2022Jul 2024 · 1 yr 9 mos · Bengaluru, Karnataka, India · Remote

  • > Investigating customer-reported CVEs/product vulnerabilities and handle related communications.
  • > Support large scale deals through accelerated RFPs/CSQs and customer discussions on Data Privacy, Governance, SDLC, Vulnerability Management, Penetration Testing and more.
  • > Incident Response for internal events.
  • > Subject matter expert for internal matters.
  • > Enhance the existing processes and systems to elevate the InfoSec program.
CybersecurityVulnerability AssessmentPenetration TestingIncident ResponseVulnerability Management

Koo

Cyber Security Engineer II

Jan 2022Oct 2022 · 9 mos · Bengaluru, Karnataka, India · Hybrid

  • > Established and led the security program at Koo, implementing comprehensive security measures.
  • > Conducted pre-release and post-release Vulnerability Assessment and Penetration Testing on Koo's Android App, iOS App, Web Apps, REST APIs and AWS Cloud Environments.
  • > Led threat modeling sessions and security reviews to identify and mitigate potential risks.
  • > MobSF, Burp Suite, and Frida for code injection, hooking, and data extraction.
  • > Monitored and moderated ingress traffic via CloudFlare WAF.
  • > Promoted Secure SDLC and DevSecOps workflows across the engineering organization.
  • > Managed the bug-bounty program at scale.
  • > Cloud security via industry-standard best practices and cross-functional coordination.
  • > Create security policies and manage security awareness programs.
  • > Conducted training, mock drills, and sent newsletters to promote cybersecurity awareness.
Vulnerability AssessmentPenetration TestingThreat ModelingCloud SecurityCybersecurity

Loginsoft

Sr. Software Engineer - Security Research

Apr 2021Jan 2022 · 9 mos · Hyderabad, Telangana, India · Remote

  • > Zero-day vulnerability research on open-source software, libraries, and plugins.
  • > CVE research and secure code review on open-source package managers like npm, Maven, PyPI, Conan, JFrog and Rust.
Vulnerability AssessmentSecure Code ReviewCVE ResearchCybersecurity

Ingram micro

2 roles

Software Engineer

Jun 2019Apr 2021 · 1 yr 10 mos · Durgapur, West Bengal, India · On-site

  • > Developed in-house security features like CAPTCHA and XSS filter using Core Java.
  • > Implemented Secure-SDLC and OWASP best practices for application development.
  • > Vulnerability Assessment and Penetration Testing of Web Apps and APIs using automated and manual techniques.
JavaVulnerability AssessmentPenetration TestingApplication Security

Intern

Jan 2019Apr 2019 · 3 mos · Durgapur, West Bengal, India · On-site

  • > Helped deliver CloudBlue SOAP APIs.
  • > Fraud filtering mechanism using Maxmind and MKDenial.

Education

West Bengal University of Technology, Kolkata

B.Tech — Information Technology

Jan 2015Jan 2019

Stackforce found 100+ more professionals with Application Security & Cybersecurity

Explore similar profiles based on matching skills and experience