Lohith Gowda M profile photo 1 on Tal

Lohith Gowda M

Staff Application Security @Atomicwork

Bengaluru

7+ years of work experience

Atomicwork
Jan 20266 mosPresent

Bengaluru

Acko
Jun 20258 mosJan 2026

Bengaluru, Karnataka, India

Web, Mobile , Cloud Security and DevSecOps
Plivo
Jun 20232 yrs 1 moJun 2025

Bengaluru, Karnataka, India

Web, API, Cloud Security and DevSecOps
Airmeet
Jun 20212 yrsMay 2023

Bengaluru, Karnataka, India

Web, Mobile and API Security
Reward360 Global Services Pvt Ltd.
Jul 20192 yrsJun 2021

Bengaluru, Karnataka, India

Web Application Security

Lohith’s AI Stack

claude code
claude code
claude
claude
perplexity
perplexity
Devin
Devin
E2B
E2B
Wispr Flow
Wispr Flow

Education

St Philomena College (Autonomous), Puttur

Bachelor's degree BCA, Computer Programming, Specific Applications

St Philomena College (Autonomous), Puttur

20153 yrs2018
1% Club

Personal Finance

1% Club

Join Lohith and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Lohith Gowda M on Tal

Headline

Staff Application Security @Atomicwork

About

Staff Application Security Engineer with 7 years in the field, now focused on securing AI. I red team AI systems and pressure-test MCP servers and agentic workflows, the attack surface most security teams are still catching up on. At Atomicwork I'm building the application security program from the ground up: AI red teaming, architecture and API reviews, shipping the fixes myself, and wiring security into CI/CD so problems get caught before production. What I bring: - Prompt injection, broken authentication and authorization, and tool-abuse testing for AI and agentic systems - Application security across APIs, web, mobile (iOS and Android), and AWS, with SAST, DAST, SCA/SBOM, and mobile reverse engineering - Building and leading application security programs, often from scratch, across Atomicwork, Acko, Plivo, Airmeet, and Reward360 (fintech, insurtech, and B2B SaaS) - Responsible disclosures recognized by Amazon, Google, Cloudflare, Cursor, Loom, and WeWork - Standout finds: 1.2M+ user PII exposed through IDOR, a banking KYC bypass, a Firefox CVE, and a Naukri API bug that made TechCrunch I also once bypassed Bangalore Namma Metro's QR fare system to ride for ₹1 and wrote it up on my blog. If you're hiring for application or AI security, or want to trade notes on MCP and agent security, I'm easy to reach

Location

Bengaluru

AI stack

claude code

claude

perplexity

Devin

E2B

Wispr Flow

Work experience

Staff Application Security Engineer at Atomicwork, Jan 2026 - Present · 6 mos, Bengaluru

Senior Security Engineer at Acko, Jun 2025 - Jan 2026 · 8 mos, Bengaluru, Karnataka, India, Web, Mobile , Cloud Security and DevSecOps

Senior Security Engineer at Plivo, Jun 2023 - Jun 2025 · 2 yrs 1 mo, Bengaluru, Karnataka, India, Web, API, Cloud Security and DevSecOps

Senior Security Engineer at Airmeet, Jun 2021 - May 2023 · 2 yrs, Bengaluru, Karnataka, India, Web, Mobile and API Security

Security Engineer at Reward360 Global Services Pvt Ltd., Jul 2019 - Jun 2021 · 2 yrs, Bengaluru, Karnataka, India, Web Application Security

Education

Bachelor's degree BCA, Computer Programming, Specific Applications, St Philomena College (Autonomous), Puttur

Personal Finance, Personal Finance, 1% Club

Public links

github: https://github.com/lohigowda

medium: https://medium.com/@lohigowda

lohigowda.in: https://www.lohigowda.in/

Lohith Gowda M - Staff Application Security Engineer in Bengaluru | Tal