Aniruddh Patil

About Aniruddh Patil

Persistent, detail‑oriented cybersecurity professional with deep expertise in Red Teaming, Purple Teaming, and Infrastructure/Cloud Penetration Testing.I specialize in simulating advanced adversary techniques, identifying gaps in detection/response, and working with Blue Teams to close those gaps.With hands‑on experience spanning vulnerability assessment, incident handling, cyber forensics, and secure code review, I bring a diverse technical toolkit to engagements. My capability to pivot between offense and defense allows me to design and execute effective Purple Teaming operations, enabling organizations to strengthen resilience against real‑world threats.Previously, I led Identity & Access Management (IAM) operations for a global automotive enterprise employees), designing 150+ SSO integrations. This gave me practical command over access flows, privileged identity governance, and IBM Security tools (ISIM, ISAM, IGI) — insights I now leverage to attack and defend authentication systems in Red/Purple engagements.Certified across Red Teaming (CRTP, MCRTA), Penetration Testing (ECSA), Incident Handling (ECIH), and Digital Forensics (CHFI), I combine structured methodology with an attacker’s mindset. My work spans OT environments, Microsoft Azure, and containerized/cloud-native systems, giving me breadth across modern enterprise infrastructures.I thrive in adversary simulation, detection engineering collaboration, and threat modeling — always focused on turning offensive insights into measurable defensive improvement.

Experience

1. Cyber Security Consultant

   NuSummit Cybersecurity

   Apr 2022 — Present · Mumbai, IN

   Network VAPT: Led 30+ infra penetration tests (manual & automated), from scoping to remediation; reduced critical findings by ~25% across client estates.Vulnerability Management: Scanned & tracked assets for Automotive & Telecom clients; streamlined VM lifecycle cutting remediation time by 40%.Red Teaming (FSI/BSFI): Executed phishing, recon, exploit chaining & lateral movement; uncovered 30+ exploitable vectors; validated SOC gaps, improved detection capability.Phishing Ops: Designed infra & ran multi‑campaign assessments; achieved 4–5% credential capture on new domains & 8–9% on real company domains; fed into awareness training & mail gateway rules.Cloud Red Teaming (AWS): Performed passive/active recon & assumed breach; exposed 30+ IAM & service misconfigurations.Tenable.sc: Delivered PoCs, including deployment validation, reporting dashboards, and multi‑region migrations for enterprise clients.Firewall Reviews: Audited 10+ enterprise firewalls; eliminated 200+ redundant/misconfigured rules.Ransomware Simulations: Ran ransomware scenarios validating backup/IR readiness; conducted DDoS assessments for Gulf Banks with Red Wolf Securities.Wireless Pentests: 5+ clients tested/retested, validating post‑fix hardening.Threat Modeling: Created 30+ models (STRIDE & DREAD mapped) across Infra, OT & App environments, guiding security controls.Other: AWS Security Group reviews (multiple deployments) and surveillance camera RTSP config review for a national visa agency.

Education

• Dayanand Anglo Vedic School Airoli

  12th, Science

  2013 — 2015

• Nalanda Public School

  10th

  2006 — 2013

• University of Mumbai

  Bachelor of Engineering (BE), Information Technology

  2015 — 2019