Find Expert Speakers

Aarushi Koolwal is a Security Engineer in Risk & Security Engineering at PhonePe, with four years of experience spanning security engineering, risk analysis and threat intelligence.Aarushi is also an active speaker who has presented at leading cybersecurity conferences such as Black Hat MEA, BSides Ahemdabad, BSides Mumbai and c0c0n. She has previously worked with CloudSEK and NotSoSecure

Aditya Shankar is a cybersecurity professional with over 10 years of experience in infrastructure, cloud, and enterprise security. He currently works as a Senior Security Architect & Administrator, focusing on Azure security, infrastructure hardening, threat detection, and security automation across large-scale enterprise environments.His work spans security architecture, log analysis, identity hardening, and defensive engineering, with a growing focus on practical applications of AI in cybersecurity workflows. He actively experiments with AI-assisted reconnaissance, automation pipelines, and modern offensive-security tooling to explore how emerging technologies are reshaping both attack and defense strategies.Aditya holds the CISSP certification along with multiple Microsoft security certifications and is passionate about making complex security concepts practical, accessible, and operationally relevant for the community.

Devang Solanki is a Security Researcher at RedHunt Labs and an offensive security engineer focused on cloud security, attack surface management, and large-scale security automation. His work centers around identifying real-world attack paths across modern cloud environments, with a particular emphasis on exposed assets and internet-scale vulnerability discovery.He is the creator of IAMX, a multi-cloud IAM permission enumeration framework designed to uncover effective permissions across AWS, GCP, and Azure through large-scale API testing. Devang has also built several open-source security tools focused on Docker security, Firebase misconfigurations, cloud exposure monitoring, and SSRF detection.His research and tooling have been presented at major security conferences, including Black Hat USA 2025, Black Hat Asia 2025, Black Hat Europe 2024, and Black Hat MEA 2024. He has also responsibly disclosed vulnerabilities to organizations including Salesforce, Cisco, Electronic Arts, and Disney.Devang actively contributes to the offensive security and bug bounty community through open-source tooling, cloud security research, and practical automation designed to help security teams better understand their real-world exposure.

DongHyeon Oh is a security researcher and Co-Founder of PatchPoint, based in South Korea. With an M.S. from KAIST's SoftSec Lab (NDSS 2019, CodeAlchemist), he has spent years breaking browsers, embedded devices, and Windows — collecting CVEs from Apple and Microsoft along the way. Ranked Microsoft Top 10 Security Researcher and previously spoke at CODE BLUE 2023. He now lives in IDA Pro and LLM prompts, hunting Windows vulnerabilities at the boundary of human intuition and AI.

IdentityShield Summit 2026 (Pune): Co-presented "The Automata Architect: Scaling Bug Bounty Success to Enterprise Level Security."

Cybersecurity Researcher and Security Trainer with hands-on experience in Web, API, Active Directory, and Thick Client Application Security Assessments. Worked on multiple large-scale onsite VAPT engagements across enterprise environments, focusing on identifying complex attack paths, exploitation techniques, and realistic security risks.Specialized in offensive security operations involving Active Directory, cloud environments, and advanced web application testing. Experienced in conducting black-box and system-level security assessments, developing security testing methodologies, and researching emerging attack vectors. Holds expertise in Windows and Linux security architecture testing along with multi-cloud offensive security concepts across AWS, Azure, and GCP.Beyond assessments, actively involved in mentoring and training students and security enthusiasts through practical, real-world cybersecurity sessions. Passionate about security research, red teaming methodologies, wireless security, and building offensive security tooling. Frequently works on vulnerability research, security documentation, and conference-driven security content focused on practical attack demonstrations and defensive awareness.

I (@h4ckologic) am a cybersecurity researcher passionate about uncovering and addressing critical vulnerabilities in complex technology implementations. My work includes identifying and reporting issues to top tech companies like Apple, Google , Microsoft and many others, some of my CVES identified are Apple (CVE-2021-31001), PhantomJS (CVE-2019-17221), and NPM html-pdf (CVE-2019-15138). I’ve had the privilege of sharing my research at leading conferences, including NoNameCon, Ekoparty, and Hacktivity (2020);  (HITB)Hack in the Box and Romhack (2023); and HITB Bangkok and BSides Ahmedabad (2024), Hack Lu and BlackHat MEA (2025) With a focus on practical solutions and deep technical insights, I’m dedicated to advancing security practices and contributing to the global infosec community.

A Cyber Security Researcher at VinSOC, Vingroup. Main focus on Reverse Engineering, Binary Exploitation & IoT HackingContact Detail:Telegram: https://t.me/sondtX: https://x.com/_sondt_Whatsapp: +84915487872

Co-founder of Sherpasec Malaysia.Spoke at multiple local conferencesUncountable panelist experiences in closed door eventsSpoke at a couple of regional conferences