Cyber Security Technical Lead and security researcher specializing in Industrial Control Systems (ICS/OT) and Offensive & Defensive AI Security. My work focuses on adversarial AI red teaming, prompt injection & jailbreak mitigation, LLM defense engineering, firmware vulnerability research, and threat modeling for mission-critical infrastructure. Passionate about empowering the global security ecosystem by engineering open-source defense tools and publishing in-depth security advisories.

memory OT/ICS Security SCADA & Fieldbus

neurology AI Security Red Team & Defense

terminal Firmware VAPT Reverse Eng & PoC

account_tree Threat Modeling AI & System Arch

cloud_sync Cloud DevSecOps CI/CD & Model Hardening

Work Experience

CHRONOLOGY // OPERATIONAL AUDIT

Cyber Security Technical Lead ABB · Bengaluru, Karnataka, India · Hybrid

Jun 2024 – Present

verified_user Penetration Testing: Expert in comprehensive testing across embedded devices, cloud, APIs, mobile apps, and thick clients.
schema Threat Modelling: Lead thorough threat modelling for products in the design phase.
bug_report Vulnerability Research: Specialise in ICS protocol vulnerability research.
groups Subject Matter Expert: Serve as a Cybersecurity SME and mentor emerging talent.
view_kanban Scrum Master: Manage team planning and effort monitoring duties.
fact_check Compliance & Audit: Drove successful audits for ISO 27001:2013 and IEC 62443-4-1:2018 certifications.
smart_toy Innovation: Explore AI applications in cybersecurity and identify zero-day vulnerabilities in third-party products.

Senior Cyber Security Engineer ABB

Nov 2021 – Jun 2024

Firmware Analysis & Threat Modelling
Penetration Testing across targets
Security Proof of Concepts (PoC)
Handling Agile Scrum Activities

Cyber Security Engineer ABB

June 2020 – Oct 2021

> Threat modelling > Penetration testing of ICS systems > DevSecOps pipelines

Cyber Security Intern ABB

June 2019 – May 2020

> Penetration testing of Embedded Systems > Fuzzing proprietary and standard protocols

Intern Cyber Cell Ahmedabad

Jan 2019 – March 2019

> Worked on multiple ongoing cyber crime cases > Helped with advanced OSINT activities

Tech Skills

terminal

Python & Scripting (C, Bash, PHP) 95%

Linux & RTOS 90%

VAPT & Tools (Burp, MSF, Drozer) 98%

ICS / SCADA Security 95%

Cloud/DevOps (Azure, Docker) 85%

Soft Skills

psychology Leadership

assignment Project Mgmt

sync DevSecOps

mic Public Speaking

Languages

English Fluent / Operational

Gujarati Native Language

Hindi Professional Working

Lab Node Monitor Active Threat Hunt & Protocol Fuzzing

__ VULNERABILITY REGISTRY

CVEs, Research & Hall of Fame

Official Coordinated Responsible Disclosures

CRITICAL // CVSS 9.8 ICS Gateway

CVE-2022-22987

Advantech ADAM-3600

Hard-coded private key inside project directory allowing unauthenticated remote administrative web server takeover.

CISA Advisory ICSA-22-032-02 open_in_new

STATUS: VERIFIED PATCHED

MEDIUM // CWE-79 Network Firmware

CVE-2023-24181

OpenWrt LuCI (openwrt-22.03)

Reflected Cross-Site Scripting (XSS) discovered in OpenWrt LuCI via the /openvpn/pageswitch.htm component.

NVD Vulnerability Details open_in_new

DISCLOSURE: COORDINATED ACKNOWLEDGED

MEDIUM // CWE-79 Network Firmware

CVE-2023-24182

OpenWrt LuCI (openwrt-22.03)

Stored Cross-Site Scripting (XSS) discovered in OpenWrt LuCI via /system/sshkeys.js allowing persistent payload execution in admin context.

NVD Vulnerability Details open_in_new

DISCLOSURE: COORDINATED ACKNOWLEDGED

military_tech

Hall of Fame & Security Acknowledgements

hexlab.xyz/achievements/ →

verified United Nations Hall of Fame verified Sony Hall of Thanks verified Alibaba Security Top verified Opera Hall of Fame verified Sophos Hall of Thanks verified Honeywell Product Security verified Naver Hall of Fame

verified Intel VDP

verified ForgeRock VDP

verified Prezi VDP

verified NCIIPC India Critical Infra

verified Dutch Gov NCSC-NL

emoji_events

Awards & CTF Honors

stars

X-Tra Miler & Star Performer Awarded at ABB for technical execution and leadership excellence

ABB RECOGNITION

flag

Top 50 – Nullcon HackIM CTF 2019 Competitive international cybersecurity CTF

GLOBAL TOP 50

workspace_premium

Top 3 India – Pragyan CTF 2017 National collegiate and professional hacking contest

TOP 3 PODIUM

Open Source & Community Contributions

terminal

MITRE ATT&CK for ICS — Technique T1694/002 (Hardcoded Credentials) open_in_new

Official content contributor documenting hardcoded credential attack patterns in ICS/SCADA equipment.

group_work

CVSS 4.0 SIG & MITRE ICS/OT SIG

Active member refining common vulnerability scoring and industrial threat matrices.

rss_feed

Vulnerability Lookup Project by CIRCL

Added CSAF (Common Security Advisory Framework) feeds to improve intelligence sharing.

code

Tool Contributor: EMBA, Photon, Reconnoitre

Direct codebase enhancements for firmware analysis and reconnaissance tools.

__ TACTICAL REPOSITORIES

Featured Security Projects

Explore all repositories on GitHub →

timer Go / NTP / IoT Security

TimeHammer

Cross-platform NTP security and resilience testing suite tailored for IoT & embedded systems. Features an interactive terminal UI (TUI) to simulate time spoofing, Kiss-of-Death packets, client fuzzing, and Y2K38 rollovers.

github.com/neutrinoguy/timehammer open_in_new

security Go / IEC 62443 / Telemetry

VoidProbe

Real-time monitoring and security assessment tool for Linux-based embedded systems. Assesses devices against IEC 62443-4-2 Denial of Service (DoS) Resistance and Resource Management (DRRM) requirements via lightweight SSH telemetry agents.

github.com/neutrinoguy/VoidProbe open_in_new

smartphone Python / Drozer

Devicestats (Drozer Module)

Drozer module to extract device information during Android mobile application penetration tests.

github.com/neutrinoguy/devicestats open_in_new

menu_book Curated Knowledge

Awesome-ICS-Writeups

Curated collection of ICS/SCADA security writeups, offensive techniques, architecture guides, and threat assessments.

github.com/neutrinoguy/awesome-ics-writeups open_in_new

cloud GCP / Cowrie / ELK

Honeypot over Cloud (ELK)

Implemented Cowrie and adbhoney honeypots over Google Cloud Platform with real-time analytics dashboards for live telemetry ingestion.

> Threat Telemetry Pipeline monitoring

__ QUALIFICATIONS

Education & Certifications

Accredited Academic & Industry Standards

school

Academic Degree Programs

POST GRADUATE DEGREE 2018 – 2020

M-Tech Cyber Security & Incident Response

Gujarat Forensic Sciences University (now NFSU - National Forensic Sciences University)

verified Digital Forensics, Threat Intelligence & Advanced Incident Response

UNDERGRADUATE DEGREE 2014 – 2018

B.Tech Computer Engineering

Gujarat Technological University (GTU)

check_circle Systems Programming, Network Protocols & Computer Architecture

verified

Professional Certifications

VERIFIED AUDITOR

verified_user

ISA/IEC 62443 Cybersecurity Expert All four certifications completed

EXPERT SUITE

skull OFFENSIVE

CEH v13 Certified Ethical Hacker

inventory_2 CONTAINER

Docker Certified Associate Enterprise Container Security

cloud_circle CLOUD

AZ-900: Azure Fundamentals Microsoft Certified Azure

health_and_safety HARDWARE/ICS

Achilles Certified Tester Industrial Communication Robustness

GPG & DISPATCH READY

Initiate Encrypted Contact

Available for threat modelling consultations, ICS protocol vulnerability research, offensive evaluations, and open-source collaboration.

[email protected] hexlab.xyz Vulnerability Disclosure Channel

send Send Encrypted Dispatch terminal Visit HexLab.xyz

Telemetry Deck v4.2 // Offensive & Defensive Cybersecurity Archetype