Mohit Aphale

Experience driving security architecture, secure-by-design practices, and technical strategy across ECU, vehicle, cloud, and connected-vehicle platforms. I lead cross-functional teams, mentor engineers, and translate threat-driven risks into practical security architectures and engineering controls. ISO/SAE 21434, TARA, secure boot, root of trust, HSM/secure elements, PKI, cryptographic key management, secure diagnostics, CAN/Automotive Ethernet, embedded Linux, API and cloud security.

Roles and Responsibilities: - Perform Penetration testing and Vulnerability Assessment, Secure Code Analysis of Embedded devices and Software components - Perform TARA and derive Security requirements for Embedded Devices, Software components. - Develop and maintain Cyber Security specifications for vehicles and features using J3061 vehicle cyber security standards.

Position: Security Consultant • Perform Secure Code Review for Applications (Thick Client, web application and Android applications) • Vulnerability Assessment and penetration testing of applications by manual and automated testing. • Involved in Design and Architecture reviews • Handling client demos, regular involvement in meetings related to application security and discussions regarding vulnerability mitigation and providing remediation consultation to fix the vulnerabilities reported.

Roles and Responsibilities: • Vulnerability Assessments for applications by manual and automated testing. • Perform Secure Code Review for Applications (Thick Client, web application and Android applications) • Providing lab to the developers to test product in various environments which include presence of Firewalls, Multiple Networks, Proxy Server, various antivirus, Active Directory, Exchange Server, VPN and more. • Imparting training to developers on Secure Code guidelines and methodologies.

Cryptography, Information Security, System Security, Python, PKI, Secure Code Review, penetration testing, vulnerability assessment

Algorithm design and Analysis, Data Structure, Compilers, Information security, Cryptography