Milap is available for hire
Hire MilapMilap Shah
Verified Expert in Engineering
VAPT Developer
Ahmedabad, Gujarat, India
Toptal member since January 22, 2026
Bio
Milap is a cybersecurity professional with 5+ years of experience in VAPT, cloud security, and ISO 27001 lead audits. He has helped organizations secure web, API, mobile, and cloud environments by identifying real-world risks, strengthening security posture, and achieving compliance with ISO 27001, SOC 2, and HIPAA.
Portfolio
Analytix Solutions
Cloud Security, Cyber Threat Hunting, ISO 27001, Network Security, VAPT...
HMS Networks
Cloud Security, Cyber Threat Hunting, Information Security, VAPT, IOS security...
Experience
- Web Security - 5 years
- VAPT - 5 years
- Cloud Security - 5 years
- Cybersecurity - 5 years
- Network Security - 5 years
- Threat Intelligence - 5 years
- AI/LLM Security - 3 years
- ISO 27001 - 3 years
Work Experience
IT Security Engineer
2022 - 2025
Analytix Solutions
- Delivered vulnerability assessment and penetration testing (VAPT) and ISO 27001 lead audits as a cybersecurity professional.
- Secured web, API, mobile, cloud, and AI applications by identifying critical risks and enabling ISO 27001, SOC 2, and HIPAA compliance.
- Delivered end-to-end VAPT for web, API, Android and iOS mobile, cloud, and AI/LLM applications, identifying and mitigating critical and high-risk vulnerabilities before production release.
- Identified vulnerabilities aligned with OWASP Top 10, SANS 25, and MITRE ATT&CK, delivering clear remediation guidance to developers and operations teams.
- Strengthened AWS and Azure cloud security by identifying IAM misconfigurations, insecure storage, and network exposure risks through targeted assessments.
- Led ISO 27001:2013 and ISO 27001:2022 audits as a lead auditor, driving risk assessments, control implementation, and continuous improvement across multiple organizations.
- Supported SOC 2 Type II and HIPAA compliance initiatives by performing security gap analysis, control validation, and risk treatment planning across people, process, and technology.
- Authored executive-ready security reports translating technical findings into business risk, remediation priorities, and measurable security improvements.
Technologies: Cloud Security, Cyber Threat Hunting, ISO 27001, Network Security, VAPT, Threat Intelligence, Information Security, Linux, Windows, Cybersecurity, IT Security, Security, AI/LLM Security, Web Security, NIST, Enterprise Cybersecurity, Cybersecurity Operations, AWS Cloud Security, AI Security, Threat Modeling, Web App Security, Vulnerability Scanning, Security Assessment, Red Teaming, Python 3, SOC 2, Vanta, IT Audits, Incident Response, Mobile Security, Security Audits, White-hat Hacking, White-hat Security, Certified Ethical Hacker (CEH)
IT Security Engineer
2018 - 2020
HMS Networks
- Conducted VAPT on 100+ web applications and 25 Android and iOS apps, identifying 2,000+ vulnerabilities, including 700 critical and 803 high-severity issues, and delivered detailed proof-of-concept reports with prioritized remediation guidance.
- Monitored and investigated security events using SIEM tools and Grafana dashboards, correlating application, network, and system logs,and resolved incidents by reducing false positives and improving overall threat detection.
- Collaborated with development, DevOps, and infrastructure teams to validate fixes and perform re-testing across web, network, and cloud environments, ensuring alignment with ISO/IEC 27001, OWASP standards, and security best practices.
Technologies: Cloud Security, Cyber Threat Hunting, Information Security, VAPT, IOS security, Network Security, Bro Network Security Monitor, Enterprise Cybersecurity, Cybersecurity Operations, AWS Cloud Security, Threat Modeling, Web App Security, Vulnerability Scanning, Security Assessment, Red Teaming, Python 3, SOC 2, Vanta, IT Audits, Incident Response, Mobile Security, Security Audits, White-hat Hacking, White-hat Security, Certified Ethical Hacker (CEH)
Project History
Enterprise Web Application Penetration Testing
Performed end-to-end VAPT on 400+ enterprise web applications across multiple industries. I identified OWASP Top 10, business logic, and access control vulnerabilities using manual and automated techniques and discovered 1,500+ vulnerabilities, including critical SQL injection and authentication bypass issues. I also delivered detailed proof-of-concept reports and worked with developers to validate fixes and reduce attack surface.
Mobile Application Security Assessment – Android & iOS
Conducted security testing on 25 Android and iOS applications following OWASP MASVS and MSTG guidelines. I identified 500+ mobile-specific vulnerabilities, including insecure data storage and API flaws, and performed reverse engineering, traffic interception, and runtime analysis. I also provided remediation guidance and re-tested applications to ensure secure release readiness.
ISO 27001 & Compliance Security Support
I supported ISO/IEC 27001:2013 and 27001:2022 implementation and compliance readiness. I mapped technical vulnerabilities to ISMS controls and risk treatment plans and assisted in security documentation, risk assessments, and audit preparation. I also helped organizations improve security maturity and regulatory alignment.
Education
2018 - 2020
Master's Degree in Cybersecurity
Halmstad University - Halmstad, Sweden
2013 - 2017
Bachelor's Degree in Information Technology
Vadodara Institute of Engineering - Vadodara, India
Certifications
SEPTEMBER 2023 - PRESENT
CQI Certified Lead Auditor
CQI Ireland
FEBRUARY 2023 - PRESENT
Ethical Hacking Essentials
EC-Council
Skills
Tools
Bro Network Security Monitor
Paradigms
Penetration Testing
Platforms
Linux, Windows, Vanta
Industry Expertise
Cybersecurity
Languages
Python 3, Python
Other
VAPT, Network Security, Cloud Security, ISO 27001, Threat Intelligence, Cyber Threat Hunting, Information Security, IT Security, Web Security, Web App Security, Security Assessment, Red Teaming, Mobile Security, Security Audits, White-hat Hacking, White-hat Security, Certified Ethical Hacker (CEH), Security, AI/LLM Security, NIST, Enterprise Cybersecurity, Cybersecurity Operations, AI Security, Threat Modeling, Vulnerability Scanning, SOC 2, IT Audits, Incident Response, ISO 27701, IOS security, ISO 27001 & Compliance, AWS Cloud Security
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring