Milap Shah
Verified Expert in Engineering
VAPT Developer
Ahmedabad, Gujarat, India
Toptal member since January 22, 2026
Milap is a cybersecurity professional with 5+ years of experience in VAPT, cloud security, and ISO 27001 lead audits. He has helped organizations secure web, API, mobile, and cloud environments by identifying real-world risks, strengthening security posture, and achieving compliance with ISO 27001, SOC 2, and HIPAA.
Portfolio
Experience
- Web Security - 5 years
- VAPT - 5 years
- Cloud Security - 5 years
- Cybersecurity - 5 years
- Network Security - 5 years
- Threat Intelligence - 5 years
- AI/LLM Security - 3 years
- ISO 27001 - 3 years
Preferred Environment
Penetration Testing, IT Security, Security, AI/LLM Security, Web Security, NIST, Enterprise Cybersecurity, Cloud Security, Cyber Threat Hunting, ISO 27001 & Compliance, Mobile Security, Security Audits, White-hat Hacking, White-hat Security, Certified Ethical Hacker (CEH)
The most amazing...
...work I’ve delivered is leading VAPT and ISO 27001 audits to identify critical risks and strengthen organizational security.
Work Experience
IT Security Engineer
Analytix Solutions
- Delivered vulnerability assessment and penetration testing (VAPT) and ISO 27001 lead audits as a cybersecurity professional.
- Secured web, API, mobile, cloud, and AI applications by identifying critical risks and enabling ISO 27001, SOC 2, and HIPAA compliance.
- Delivered end-to-end VAPT for web, API, Android and iOS mobile, cloud, and AI/LLM applications, identifying and mitigating critical and high-risk vulnerabilities before production release.
- Identified vulnerabilities aligned with OWASP Top 10, SANS 25, and MITRE ATT&CK, delivering clear remediation guidance to developers and operations teams.
- Strengthened AWS and Azure cloud security by identifying IAM misconfigurations, insecure storage, and network exposure risks through targeted assessments.
- Led ISO 27001:2013 and ISO 27001:2022 audits as a lead auditor, driving risk assessments, control implementation, and continuous improvement across multiple organizations.
- Supported SOC 2 Type II and HIPAA compliance initiatives by performing security gap analysis, control validation, and risk treatment planning across people, process, and technology.
- Authored executive-ready security reports translating technical findings into business risk, remediation priorities, and measurable security improvements.
IT Security Engineer
HMS Networks
- Conducted VAPT on 100+ web applications and 25 Android and iOS apps, identifying 2,000+ vulnerabilities, including 700 critical and 803 high-severity issues, and delivered detailed proof-of-concept reports with prioritized remediation guidance.
- Monitored and investigated security events using SIEM tools and Grafana dashboards, correlating application, network, and system logs,and resolved incidents by reducing false positives and improving overall threat detection.
- Collaborated with development, DevOps, and infrastructure teams to validate fixes and perform re-testing across web, network, and cloud environments, ensuring alignment with ISO/IEC 27001, OWASP standards, and security best practices.
Experience
Enterprise Web Application Penetration Testing
Mobile Application Security Assessment – Android & iOS
ISO 27001 & Compliance Security Support
Education
Master's Degree in Cybersecurity
Halmstad University - Halmstad, Sweden
Bachelor's Degree in Information Technology
Vadodara Institute of Engineering - Vadodara, India
Certifications
CQI Certified Lead Auditor
CQI Ireland
Ethical Hacking Essentials
EC-Council
Skills
Tools
Bro Network Security Monitor
Paradigms
Penetration Testing
Platforms
Linux, Windows, Vanta
Industry Expertise
Cybersecurity
Languages
Python 3, Python
Other
VAPT, Network Security, Cloud Security, ISO 27001, Threat Intelligence, Cyber Threat Hunting, Information Security, IT Security, Web Security, Web App Security, Security Assessment, Red Teaming, Mobile Security, Security Audits, White-hat Hacking, White-hat Security, Certified Ethical Hacker (CEH), Security, AI/LLM Security, NIST, Enterprise Cybersecurity, Cybersecurity Operations, AI Security, Threat Modeling, Vulnerability Scanning, SOC 2, IT Audits, Incident Response, ISO 27701, IOS security, ISO 27001 & Compliance, AWS Cloud Security
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring