Himanshu Joshi

About Himanshu Joshi

As a subject matter expert (SME) in vulnerability assessment (VA) and remediation, I bring over 8+ years of experience in the tech industry, specializing in vulnerability analysis, risk assessment, and remediation guidance for enterprise applications. My expertise includes dynamic and static application security testing, enterprise penetration testing, global VA compliance, security governance, and process optimization to strengthen organizational security postures.In my current role as Assistant Vice President, Senior Application Vulnerability Assessment Analyst at Citi, I work on the end-to-end vulnerability remediation lifecycle across a portfolio of 150+ global applications. I work closely with VA partners and application teams to assess risk, provide expert guidance on issue severity, and ensure timely remediation in compliance with regulatory and organizational standards. My role focuses on driving efficient vulnerability analysis and mitigation strategies, ensuring minimal exposure and enhanced risk management.Previously, as Head of Security Research at ProtectOnce, I led efforts to proactively identify and mitigate security risks, developed cloud security solutions for AWS, and conducted comprehensive vulnerability assessments to safeguard critical business applications.As an Independent Security Researcher, I have been recognized by Microsoft, Google, and Red Hat for my high-severity vulnerability disclosures and have delivered technical talks on security best practices to global audiences.Core Competencies- Vulnerability Analysis & Risk Assessment: Issue Remediation, Severity Evaluation, Compliance Reporting- Application Security: Penetration Testing, OWASP Top 10, SAST, DAST- Security Tools: Burp Suite, Nessus, Nmap, Checkmarx, Snyk, Archer, Open Source AppSec Tools- Cloud Security: AWS EC2, EKS, ECS, Lambda, CloudFormation, Traffic Mirroring with Suricata, WAF- Programming: Python, NodeJS- DevSecOps: Security Workflows in CI/CD using GitHub Actions- Additional Skills: Threat Analysis, Security Governance, API Security, Regex Writing, Jira, Microsoft DevOpsPassionate about enhancing security processes and enabling proactive risk mitigation, I am committed to helping organizations build resilient and secure environments.Let’s connect to explore opportunities for collaboration in strengthening security initiatives.

Experience

1. Assistant Vice President, Sr Application Vulnerability Assessment Analyst

   Citi

   Jan 2025 — Present · Pune, IN

   Serve as a subject matter expert in vulnerability assessment (VA) issue remediation, ensuring compliance with regulatory timelines and internal security standards- Assess assigned severities and collaborate with application teams and VA partners to drive timely and effective remediation- Oversee the end-to-end VA issue lifecycle, from identification to closure, ensuring adherence to remediation plans and due dates- Provide expert guidance on severity adjustments and risk-based prioritization to optimize remediation efforts- Work closely with cross-functional teams to implement mitigation strategies, minimizing security exposure and enhancing Citi\'s security posture- Focus on streamlining remediation processes to achieve operational excellence and compliance goals.

Education

• Bharati Vidyapeeth's Jawaharlal Nehru Institute Of Technology

  Associate’s Degree, Computer/Information Technology Administration and Management

  2009 — 2012

• Savitribai Phule Pune University

  Bachelor’s Degree, Computer Engineering

  2012 — 2016

Skills

• Network Design
• Java
• Network Administration
• Brand Strategy
• Art Direction
• User Interface Design
• Python
• Unity3d
• Requirement Analysis
• Css
• Html
• Branding & Identity
• User Experience Design
• Windows Server
• Business Operations
• Visual Design
• Business Strategy
• C
• Leadership
• Red Hat Linux
• Php
• Digital Illustration
• Visual Communication
• Web Design