Prasanth Elangovan

As enterprises across healthcare, banking and financial services, e-commerce, education, and enterprise SaaS rapidly scale digital platforms across web, cloud, mobile, and enterprise networks, security weaknesses increasingly translate into business risk, regulatory exposure, and revenue impact. Modern security programs require not only vulnerability discovery, but also clear validation, exploitation context, and remediation aligned with business priorities. At EY, I worked as a Cybersecurity Consultant supporting enterprises across web, cloud, mobile, and network environments.I contributed to 50+ clients and 70+ engagements, owning reconnaissance, exploitation, retesting, reporting, and client walkthroughs. I received the Budding Star Award within six months and a double promotion within one year for delivery quality and client impact. I conducted Web Application Penetration Testing (black, grey, and white box) across 200+ applications, identifying business logic flaws, broken access control, authentication issues, and SQL injection vulnerabilities using OWASP-aligned approaches. I built custom Burp Suite extensions to automate detection of access control issues and sensitive parameters in Java-based applications, improving efficiency and coverage. I performed Network Penetration Testing of enterprise environments (firewalls, routers, switches) and AWS cloud security assessments, identifying IAM, storage, and network misconfigurations. I also executed APT-style assessments using OSINT, performed Android mobile application security testing, and supported incident response for a vehicle manufacturing company by developing a custom PowerShell script for threat-actor identification. I worked closely with engineering teams to provide remediation guidance and validate fixes. On a major engagement, remediation efforts contributed to an ~60% improvement in security metrics, while faster delivery helped the EY team achieve engagement and revenue goals ahead of schedule.

Cybercrime investigations increasingly involve sophisticated threat actors, including financially motivated attackers, scam networks, and advanced persistent threats (APTs), whose activities impact individuals, organizations, and national digital infrastructure. Analyzing such cases requires understanding attacker behavior, exploitation techniques, and the real-world consequences of cyber attacks. At the Gurugram Cyber Cell, I worked as a Cybersecurity Intern, where I investigated real-world cybercrime cases provided by the team, including online scams, financially motivated attacks, and advanced threat scenarios involving known hacker groups and zero-day–style exploitation techniques. I analyzed attack flows affecting users and systems, interpreted findings using cybersecurity labs and investigative tooling, and applied threat defense concepts to understand attacker methods and impact. I documented technical observations, identified patterns and indicators, and submitted investigation results and reports for review, strengthening my practical understanding of cybercrime investigation and threat defense.

Organizations depend on Linux servers to host critical applications, internal services, and network infrastructure, making system stability and access control essential for day-to-day operations. Misconfigurations at the server or network layer can quickly lead to service disruption or security exposure, reinforcing the need for disciplined system administration and secure deployment practices. At Mavel Technologies Pvt Ltd, I worked as a Linux Server Administrator Intern, supporting end-to-end server operations on Debian and Ubuntu systems. My work included deploying and maintaining production and internal servers, configuring mail services, ticketing platforms, DNS basics, and network monitoring, and supporting cloud-based and on-prem deployments. I managed user access, permissions, and service isolation using sudoers and system-level controls, implemented network security measures using pfSense and open-source tools such as iBind, and performed regular backups, restores, patching, and system health checks to ensure service continuity. I also configured and maintained Wi-Fi infrastructure and Ubiquiti devices, supported VMware virtualization, assisted with Docker-based container deployments, handled incident and change requests, and contributed to research and development initiatives related to network and server security.

Modern enterprise, campus, and residential networks rely heavily on fiber-optic infrastructure to deliver high-speed, low-latency, and always-available connectivity. As organizations scale their digital operations, physical-layer failures, improper fiber handling, or weak network design decisions can lead to widespread outages, degraded performance, and direct impact on end users and business continuity. At MRKR Communications Pvt Ltd, the focus is on designing, deploying, and maintaining reliable fiber-optic network infrastructure for enterprise, campus, and residential environments. The work emphasizes operational reliability, structured deployment practices, accurate testing, and rapid fault resolution to ensure stable network availability.

Pursuing a part-time PhD focused on automotive cybersecurity and physical security systems, with research centered on securing modern vehicle architectures against emerging cyber threats and improving system resilience.

Graduated as a Gold Medalist in M.Sc. Cybersecurity, awarded the gold medal by the Governor for outstanding academic performance. As part of my academic work, conducted security assessments on institutional systems and actively trained peers and junior students on cybersecurity concepts and practical security testing, demonstrating strong technical initiative and knowledge sharing.