Overview

Mohit Yadav is a distinguished cybersecurity professional with nearly a decade of experience across various domains, including cyber penetration testing, vulnerability management, security reviews, incident management, and governance, risk, and compliance (GRC). His innovative approach to solving complex security challenges has established him as a leader in the field, driving advancements that enhance functional efficiency and safeguard sensitive data.

Mohit has demonstrated significant professional growth through his mastery of complex security frameworks and governance models. He has ensured that complex solutions, including SaaS, commercial off-the-shelf products, and Generative AI solutions, are comprehensively assessed and deployed while maintaining stringent security protocols. Mohit’s credentials are further validated by his recognition as a Gartner Ambassador.

Mohit has overseen various facets of cybersecurity, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), threat modeling, vulnerability assessment, and penetration testing for projects implemented by global teams. He has ensured these processes are thoroughly executed and that any gaps are promptly remediated, in compliance with security frameworks and regulations such as NIST, ISO 27001, GDPR, and OWASP.

Mohit’s technical contributions transcend conventional security measures through the implementation of observability, resiliency testing, and application monitoring. His pioneering work in integrating artificial intelligence with cybersecurity has significantly enhanced security posture and optimized resource allocation. Mohit has made substantial contributions to OWASP projects, which are highly referenced in the global cybersecurity domain. His contributions to OWASP Generative AI projects include the OWASP Generative AI Red Teaming Standard, the OWASP Generative AI Center of Excellence (CoE) Solution Document, and the OWASP Generative AI/LLM Top 10 Standard.

Mohit has created sustainable frameworks for security implementation that protect digital infrastructure while fostering the growth of new cybersecurity professionals. His methodologies, which combine technical expertise with professional development, have established new standards in the industry.