Rohan Irani

Experience

Junior Cyber Security Engineer / Junior IT Solutions Engineer (Intern)

AAKONSULT Pty Ltd, Melbourne

Jul 2026 – Present
- Built Browser Monitor, a payment page tamper-detection tool for PCI DSS v4.0 requirements 6.4.3 and 11.6.1, now running weekly in production on a nonprofit client's live donation pages to catch Magecart-style card skimming.
- Tested the company's Salesforce-based SaaS product, Payments2Us, for client-side vulnerabilities, using Aura Inspector to find exposed data objects and insecure Aura component endpoints.
- Supported security operations across client environments, including firewall management, anti-spam filtering, and backup and disaster recovery.
- Administered Exchange Online and Microsoft 365 through PowerShell, including bulk mailbox archive setup, and troubleshot connectivity issues on Linux systems.
- Worked with the senior systems and network administrator on client networking, switching and routing, supported Azure and AWS environments, and documented setups in Visio and Draw.io.
Application Security Testing & Vulnerability Assessment (Intern)

Disney Star (The Walt Disney Company), Mumbai

Jun 2024 – Oct 2024
- Analysed and executed over 15 vulnerability assessments and penetration tests on web and software applications, identifying critical security flaws and contributing to a 40% reduction in exploitable vulnerabilities.
- Used Burp Suite, Fortify and Snyk to detect security flaws such as injection, misconfigurations and insecure dependencies.
- Prioritised and remediated critical vulnerabilities, strengthening application security and compliance posture.
- Stayed current on emerging threats and trends in cyber security, adapting testing methods as needed to address new risks.
Service & Quality Assurance (Intern)

Larsen & Toubro Infotech Mindtree, Remote

Jan 2023 – Apr 2023
- Spearheaded the strategic categorisation and prioritisation of over 2,000 service tickets monthly, leading to a 25% reduction in average resolution time and improved SLA adherence across multiple client accounts.
- Led the strategic categorisation and prioritisation of service tickets to enhance operational efficiency and ensure alignment with quality standards.
- Audited and evaluated 100+ service tickets per week for compliance with internal SOPs and client-specific SLAs.

Projects

Browser Monitor

In production

Built at AAKONSULT · PCI DSS v4.0 requirements 6.4.3 and 11.6.1

Payment page tamper detection that catches Magecart-style card skimming. Each scan loads the page in headless Chrome, SHA-256 hashes every script, inline event handler and security header (CSP, HSTS), and compares them against an approved baseline. Tag manager and analytics scripts are matched by URL and ID, and per-visit nonces are stripped, to reduce false alerts.

Alerts go to the internal team or the client based on who owns the change, approvals need a named reviewer and a second confirmation, and every decision is logged with CSV export. The admin dashboard uses passwordless one-time-code sign-in with HMAC-hashed codes and sessions, rate limits, __Host- cookies and cross-site request blocking.

TypeScript
Puppeteer
Cloudflare Workers
D1
KV
WAF

Code is private (client work).

CAN Bus Security Analysis

Simulated a vehicle Controller Area Network (CAN) bus, demonstrated denial-of-service and replay attacks, and built tools to monitor and manipulate CAN traffic.

Automotive security
DoS
Replay attacks
Traffic analysis

Custom Android ROM Development

Compiled Android ROMs from AOSP source on Linux, including build environment setup, dependency management, kernel configuration and fixing build errors across a large codebase.

AOSP
Linux
Kernel configuration

View device tree on GitHub

LawGIC-AI

An AI tool that answers legal questions using India's 2023 criminal law codes (BNS, BNSS and BSA) and cites the relevant sections.

AI
Natural language processing
Legal research

Skills

Security & Compliance

PCI DSS v4.0
Vulnerability assessment
Web app penetration testing
Static code analysis
Dependency scanning
Security headers (CSP, HSTS)
Change detection & alerting
Audit logging

Security Tools

Burp Suite
Fortify
Snyk
Wireshark
Autopsy
Aura Inspector

IT & Cloud

Microsoft 365
Exchange Online
Windows Server
Azure
AWS
Cloudflare (Workers, WAF)
Firewalls
Anti-spam filtering
Backup & disaster recovery
Switching, routing & subnetting

Scripting & Tools

PowerShell
Python
TypeScript
JavaScript
SQL
Linux
Git
Jira
ServiceNow
Visio
Draw.io

Education

Master of Information Systems

University of Melbourne

Mar 2026 – Dec 2027

B.Tech in Computer Engineering (Degree + Diploma)

Mukesh Patel School of Technology Management & Engineering (NMIMS), Mumbai

Jul 2019 – Jun 2025

CGPA 3.47/4