Mohit Aphale

1. Implement and drive the cybersecurity concept at the vehicle level in accordance with ISO 21434, SAEJ3061 2. Executing TARA, cybersecurity goals and requirements for Embedded devices and software components 3. Implementation and evaluation of Security analysis (Threat analysis, Attack vectors, Risk reports, Vulnerability analysis, Penetration testing) 4. Develop procedures for OEM (Process gap analysis, TARA, security requirements and more…) 5. Drive Engineering Software OTA security, Gateway Analysis

Roles and Responsibilities: - Perform Penetration testing and Vulnerability Assessment, Secure Code Analysis of Embedded devices and Software components - Perform TARA and derive Security requirements for Embedded Devices, Software components. - Develop and maintain Cyber Security specifications for vehicles and features using J3061 vehicle cyber security standards.

Position: Security Consultant • Perform Secure Code Review for Applications (Thick Client, web application and Android applications) • Vulnerability Assessment and penetration testing of applications by manual and automated testing. • Involved in Design and Architecture reviews • Handling client demos, regular involvement in meetings related to application security and discussions regarding vulnerability mitigation and providing remediation consultation to fix the vulnerabilities reported.

Roles and Responsibilities: • Vulnerability Assessments for applications by manual and automated testing. • Perform Secure Code Review for Applications (Thick Client, web application and Android applications) • Providing lab to the developers to test product in various environments which include presence of Firewalls, Multiple Networks, Proxy Server, various antivirus, Active Directory, Exchange Server, VPN and more. • Imparting training to developers on Secure Code guidelines and methodologies.

Cryptography, Information Security, System Security, Python, PKI, Secure Code Review, penetration testing, vulnerability assessment

Algorithm design and Analysis, Data Structure, Compilers, Information security, Cryptography