Phishing Awareness
A practical cybersecurity awareness write-up focused on recognizing phishing attempts, reducing risk, and improving everyday security behavior.
Security Analyst & GRC
Hemraj Patel secures what matters.
IT Analyst at Luvansh and NYU M.S. in Cybersecurity graduate (May 2026). IT audits, identity and access, vulnerability management, and SOC operations — with a national athlete’s discipline in every engagement.
Overview
The intersection of security and discipline
Security practitioner across engineering, operations, and governance, with an athlete’s mindset forged through 200+ state medals and national-level swimming.
Governance & identity
IT audits against NIST CSF 2.0, ISO 27001, and SOC 2 with 200+ findings closed, plus identity and access management for 350+ users across Active Directory and Entra ID.
SIEM & vulnerability management
Vulnerability management with Nessus and OpenVAS that cut high-severity risk 40%, and SIEM correlation tuning in Splunk and ELK that cut false positives 28%.
Athlete’s mindset
200+ state medals, multiple national medals, and 7.5 miles of daily training. The same discipline that won medals now secures systems.
By the numbers
Impact, measured
200+
Audit findings closed
350+
User identities managed
75+
Unused permissions removed
150+
Application flaws closed
40%
High-severity risk reduction
28%
False-positive reduction
Recent roles
Where I am now and the roles that shaped me — open any role for the full detail.
Jul 2026 – Present
IT Analyst
Luvansh · Full-time · New York, NY
Run internal IT audits against NIST CSF 2.0, ISO 27001, and SOC 2, manage identity and access for 350+ users across Active Directory and Entra ID, and test an AI chatbot for prompt injection and jailbreaks.
Sep 2024 – May 2026
Security Research Assistant
New York University · Part-time · New York, NY
Led governance and audit-readiness work that raised compliance posture 20%, ran security awareness workshops that lifted phishing detection 30%, and researched adversarial ML threats at the NYU Osiris Lab.
May 2023 – Jul 2024
Security Engineer
SPAN Inspection Systems Pvt. Ltd. · Full-time · Gandhinagar, GJ, India
Scaled vulnerability management with Nessus and OpenVAS across cloud, on-premises, and critical-infrastructure environments — remediating 100+ findings, cutting high-severity risk 40%, and raising endpoint compliance to 95%.
Education & credentials
Academic grounding
M.S. in Cybersecurity from NYU — graduated May 2026 — backed by industry certifications.
2024 – 2026
New York University
M.S. in Cybersecurity, Tandon School of Engineering
Graduated May 2026 · GPA 3.57
Selected projects
A curated selection reflecting my cybersecurity interests, research direction, and technical execution.
AI security — NYU Osiris Lab
LLM PackageGuard
A scanner that catches hallucinated or malicious packages in AI-generated code by validating imports against PyPI, OSV, and GitHub APIs, benchmarked across GPT-4, Gemini, and Cohere.
Privacy — Chrome extension
Swiper No Swiping
A Chrome extension that flags personal data (names, emails, SSNs, financial details) in documents before they are uploaded, processing everything locally in the browser.
Beyond the keyboard
The athlete behind the analyst
From pool to protocol
Fifteen years of competitive swimming — 200+ state medals, multiple national medals, and up to 7.5 miles of training a day — forged the discipline, pressure management, and long-game mindset I now bring to security work.
The last national medal came in 2023. The training never really stopped; it just changed pools.
Read the full journey“The water doesn’t care about your excuses. It only respects your preparation.”
Recent writing
Connecting technical work with the experiences behind it.
Operational Cyber Resilience
A research paper exploring operational cyber resilience through structured frameworks and practical IT-sector security considerations.
Let’s connect
Currently an IT Analyst at Luvansh, and open to Security Analyst and GRC roles in New York.