Arun N.

Product Engineer

India5 yrs 7 mos experience

Most Likely To SwitchAI Enabled

Key Highlights

5+ years in offensive security and red teaming.
Developed custom tools and frameworks for enhanced security.
Speaker at major cybersecurity conferences.

Stackforce AI infers this person is a Cybersecurity expert specializing in offensive security and red teaming.

Contact

Skills

Core Skills

Red TeamingCloud SecurityApplication SecurityPenetration TestingWeb Application Security

Other Skills

AI AgentsAWS SecurityAWS PentestingActive DirectoryEvasionGenerative AIKubernetesContainer SecurityAIMLHyper-VWindows InternalsAWSWeb Application Security AssessmentAI FundamentalsNeo4j

About

Offensive security specialist with 5+ years conducting red team operations, penetration testing, and security research for financial institutions, Fortune 500 companies, and cloud environments. Deep expertise in Active Directory attack chains, defense evasion, and custom tooling development. Built C2 frameworks, post-exploitation tools, and red team infrastructure automation at scale. Speaker at Defcon Red Team Village, MCTTP, Bsides Transylvania, HackSpaceCon, RingZer0, RedTeamSummit, c0c0n. In addition to his professional achievements and contributions to the cybersecurity community, Arun Nair dedicates his free time to sharing knowledge and insights on his blog at dazzyddos.github.io and medium.com/@coderarunnair

Experience

5 yrs 7 mos

Total Experience

11 mos

Average Tenure

1 yr 3 mos

Current Experience

Redseer security

Senior Security Consultant

Feb 2025 – Present · 1 yr 3 mos · Florida, United States · Remote

Led end-to-end penetration testing and red team operations spanning internal, external, cloud, and web attack surfaces for clients across multiple sectors.
Developed a Command & Control (C2) framework and custom tools to streamline Red Teaming processes, boosting team efficiency.
Designed Micro AI Agents to augment penetration testing and red team activities, automating key phases of the assessment lifecycle.
Authored research on AI Security and innovative Active Directory attacks, sharing insights through engaging blog posts.

AI AgentsAWS SecurityAWS PentestingActive DirectoryCloud SecurityEvasion+4

Jpmorganchase

Security Engineer

Aug 2023 – Jan 2025 · 1 yr 5 mos · Bengaluru, Karnataka, India · On-site

Led a comprehensive security review of Hyper-V infrastructure, simulating the MGM ransomware incident to identify critical vulnerabilities.
Developed and implemented robust security profiles for both Windows and Linux systems, enhancing protection against various threats.
Conducted source code reviews to identify potential security risks, ensuring adherence to best coding practices.

AIMLAWS SecurityApplication SecurityHyper-VWindows InternalsCloud Security

Google

Associate Security Consultant

Jan 2022 – Aug 2023 · 1 yr 7 mos · Bengaluru, Karnataka, India · Remote

Conducted Ransomware Technical Assessments and various penetration tests for Google Cloud customers.
Executed successful Social Engineering and Phishing campaigns, enhancing security awareness training.
Developed secure Red Team and Phishing Infrastructure, prioritizing security and operational strategy.
Identified misconfigurations and excessive permissions in AWS environments during cloud infrastructure penetration testing.

Red TeamingPenetration Testing

Payatu

Security Consultant

Jul 2021 – Dec 2021 · 5 mos · Pune District, Maharashtra, India · Remote

Executed thick client application penetration testing, identifying critical flaws in data encryption and local storage.
Conducted Red Team Assessments for multiple Fortune 500 companies, enhancing their security posture.
Performed comprehensive Cloud and Container security audits, ensuring robust protection against vulnerabilities.

AWSContainer SecurityRed TeamingWeb Application Security

Ey

Associate Consultant

Jan 2021 – Jul 2021 · 6 mos · Bengaluru, Karnataka, India · Remote

Conducted comprehensive vulnerability assessments and penetration testing for web, mobile, API, and thick client applications.
Executed external attack simulations for large-scale private companies to identify security weaknesses.
Performed security configuration reviews for servers and networking devices, adhering to CIS standards.

Web Application SecurityRed Teaming

Indusface private limited, mumbai

Security Analyst

Jul 2020 – Dec 2020 · 5 mos · Mumbai, Maharashtra, India · Remote

Conducted comprehensive vulnerability assessments and penetration testing for web and mobile applications.
Collaborated with leading financial institutions, including HDFS, ICICI Bank, and IndusInd Bank, to enhance application security.
Specialized in mobile application security assessments for Android, identifying issues like insecure data storage and weak cryptographic practices.

Web Application Security AssessmentWeb Application Security

Coding ninjas

Machine Learning Teaching Assistant

Mar 2019 – Jul 2019 · 4 mos · New Delhi, Delhi, India · Remote

Assisted in teaching Machine Learning modules, enhancing students' understanding of complex concepts.
Conducted doubt sessions to clarify student queries and foster a supportive learning environment.
Debugged codes and provided hands-on assistance with assignments and projects, ensuring students grasped practical applications.