Chinmay Prawah Pant
Uttarakhand,
Summary
Security-focused Software Engineer and Researcher with a background in scalable application engineering and systems security. Successfully bridged practical defense with academic inquiry by architecting PII-safe analytics infrastructure and co-authoring research in IoT security and malware analysis. Combining defensive engineering with community advocacy, I aim to transition from applied practice to advanced research in critical infrastructure protection and secure system architecture.
Overview
5
5
years of professional experience
1
1
Certification
Work History
Software Engineer
Gamezop
08.2024 - Current
- Spearheaded a custom UI-library that securely parsed and rendered Payload CMS rich text, implementing robust sanitization during serialization to mitigate all Cross-Site Scripting (XSS) risks.
- Engineered a modular Analytics SDK to securely process over 100M+ events monthly across 5+ products, implementing automatic client-side PII masking to prevent data leakage.
- Led incident response for a live bot-net attack, investigated anomalous logs to identify the attack vector, and mitigated the threat by deploying rate-limiting and standardizing API error responses to secure the login endpoint.
- Implemented automated testing with Cypress and Jest, ensuring reliable deployments and reducing regression issues.
SDE-1
Growagro
06.2023 - 07.2024
- Engineered an in-house dashboard to monitor sensitive employee and analytics data, implementing strict role-based access controls (RBAC) to ensure data segregation and protect PII from unauthorized access.
- Deployed secure authentication with Auth0 for centralized identity and access management (IAM) across all projects, enforcing MFA and SSO to secure all user and service accounts.
- Developed and secured all REST APIs for data exchange, using Auth0 for token-based authentication and implementing input validation to protect backend services from injection attacks and unauthorized access.
Program Engineer - Security (Internship)
Permissionless
09.2022 - 02.2023
- Managed the secure deployment and hardening of third-party applications (Zulip, Coder, and Workland), configuring network rules and access controls to isolate services and minimize attack surfaces.
- Managed AWS cloud infrastructure (EC2, ECS, S3), configuring security groups, IAM policies, and S3 bucket policies to enforce the principle of least privilege.
Cyber Security Summer Intern
Gurugram Police
06.2021 - 07.2021
- Assisted in live cybercrime investigations, specializing in phishing and web-based attacks.
- Analyzed and de-obfuscated malicious URLs, parsed email headers, and traced attacker infrastructure from active phishing campaigns.
- Recovered and analyzed digital evidence, such as browser histories and download logs, to help link suspects to the attacks.
- Learned and applied core digital forensics principles, including data recovery and evidence handling (chain of custody), in real-world cases.
Education
Bachelor of Science - Computer Science
University of Delhi
Delhi, India04.2023
Skills
- C/C
- JavaScript/TypeScript
- Python
- Linux
- LaTeX
- Digital Forensics
- Network Security
- Malware Analysis
- Web3 (Solidity)
Certification
- Security+ | CompTIA | 12 Dec 2025
- Linux Certified Investigator | CSI Linux
- Dark Web Investigation | CSI Linux | 31 January 2022
Language Skills
English
Advanced (C1)
Timeline
Software Engineer
Gamezop
08.2024 - Current
SDE-1
Growagro
06.2023 - 07.2024
Program Engineer - Security (Internship)
Permissionless
09.2022 - 02.2023
Cyber Security Summer Intern
Gurugram Police
06.2021 - 07.2021
Bachelor of Science - Computer Science
University of Delhi
Publications
SCI-IoT: A Quantitative Framework for Trust Scoring and Certification of IoT Devices Authors: Shreyansh Swami, Ishwardeep Singh, Chinmay Prawah Pant | Publication: arXiv (2025)
- Proposed a quantitative certification framework benchmarking IoT trustworthiness via 30 weighted security tests and a six-tier grading model to standardize compliance.
Adaptive Detection of Polymorphic Malware: Leveraging Mutation Engines and YARA Rules Authors: Shreyansh Swami, Ishwardeep Singh, Ujjwalpreet Singh, Chinmay Prawah Pant | Publication: arXiv (2025)
- Analyzed 8 polymorphic behaviors against commercial AVs and EDRs, demonstrating that hybrid detection pipelines significantly outperform standalone defenses with 92% coverage.
Community Impact
Speaker at SheKunj | 14 October 2025
- Delivered a technical workshop on "Building Fast, Robust, and Secure MVPs" to an audience of aspiring students and developers.
Hackathon Mentor & Judge | 2022 - Current
- Judged and mentored at over 30 national hackathons, including InnovateNSUT, HackCBS, and AceHacks, reviewing 300+ project submissions.
- Guided 500+ participants in developing robust MVPs, providing expert feedback on secure coding practices, safe data handling, frontend architecture, and usability.
Co-Organizer, HackCBS | 2021 - 2023
- Co-organized two editions of India's largest student-run hackathon, managing operations for 700+ attendees from over 3200+ registrations.
- Led the event's technical operations, which included securing the participant data pipeline, developing the event website, and managing a stable network for 2,000+ concurrent devices.
Volunteering
Community Service | May 2025 - Jun 2025
- Proactively organized and delivered independent "Practical Cyber Hygiene and Awareness" workshops for government schools in rural Uttarakhand, educating students and staff on identifying phishing attacks, securing social media, and recognizing online scams.
Volunteer Contributor, CSI Linux | Aug 2022 - May 2023
- Contributed code to the open source CSI Linux project, enhancing its OSINT and digital forensics tools while collaborating with a global community of security professionals.
Volunteer, National Service Scheme (NSS) | 2018 - 2023
- Organized and led digital-safety workshops for surrounding rural communities and local government schools.