Headline

Bridging security and engineering with vulnerability management expertise.

About

I'm a Senior Security Engineer (Lead) with 9 years in cybersecurity and 12 in IT. I currently own the full security surface of an AI product company, from penetration testing and cloud controls to incident response and external audits. What I do: AI & LLM security I test large language model (LLM) applications, Model Context Protocol (MCP) servers and retrieval-augmented generation (RAG) pipelines for prompt injection, excessive tool permissions, broken authorization and sensitive-data exposure. So far: 5+ MCP servers and 4+ LLM applications tested in production, 10+ high and critical issues found, all fixed within 14 days. I also built the AI security controls in use across 10+ AI products: gateway and guardrail policies, RAG access controls, MCP tool-permission scoping, model and API authentication, and AI activity monitoring. Application security & penetration testing Manual web, API, mobile and network pentesting, with SAST and DAST built into CI/CD. I prioritize fixes by business risk, not raw CVSS, and cut critical-vulnerability fix time from 14 to 7 days. Cloud & infrastructure security IAM and least privilege, network exposure, encryption, secrets management, logging and patching across AWS and Google Cloud, plus Cloudflare controls for public-facing applications. Governance, risk & compliance Primary contact for external auditors across 5 SOC 2 audits and 5 ISO/IEC 27001 cycles with zero major nonconformities. I've completed 3 GDPR assessments, run the company risk register, and trained 500+ employees on security. I started out as a Linux administrator and moved into security through hands-on hardening work. I still prefer being in the testing and cloud reviews myself over managing from a distance.

Location

Greater Bengaluru Area

AI stack

anthropic apis

antigravity

claude code

claude

codex

grok

Work experience

Lead IT Security Analyst at Impact Analytics, May 2021 - Present · 5 yrs 6 mos, Bengaluru, Lead information-security activities spanning cyber GRC, AI and application security, cloud security assurance, penetration testing, vulnerability management and incident response. • Assess AI-enabled applications, LLM integrations and Model Context Protocol (MCP) implementations for authentication and authorisation weaknesses, tool-permission risks, prompt-injection paths, sensitive-data exposure, API abuse and insecure integrations. • Plan and conduct penetration testing and vulnerability assessments across web applications, APIs, networks and cloud environments; partner with engineering teams to prioritise and remediate critical findings. • Review cloud security controls covering IAM, network exposure, encryption, logging, secrets management, secure configuration and vulnerability remediation. • Lead the implementation and continuous improvement of controls aligned with ISO/IEC 27001:2022, while supporting SOC 1/SOC 2 audit readiness and GDPR-aligned security requirements. • Perform security risk assessments, control reviews, audit-evidence preparation, policy development and remediation tracking. • Manage vulnerability-management and incident-response activities, including investigation, containment, root-cause analysis and corrective actions. • Translate technical, cloud and AI-security findings into business risks, remediation priorities and leadership-level reporting. • Apply a Linux, infrastructure and DevOps background to bridge governance requirements with practical engineering controls.

Lead Project Engineer at Persistent Systems, Jun 2020 - May 2021 · 1 yr, Bengaluru, Karnataka, India

Security Analyst at Head Digital Works Pvt Ltd., Oct 2017 - May 2020 · 2 yrs 8 mos, Greater Hyderabad Area, • Performed vulnerability assessments and penetration testing across the company's web and application platforms, reducing exposure to OWASP Top 10 and other security risks. • Handled security incident response and monitoring, investigating and resolving security events across the environment. • Carried out secure-configuration reviews and hardening of Linux/Windows servers, databases and network devices. • Supported security policies, awareness and compliance activities across the organisation.

System Administrator at Head Digital Works Pvt Ltd., Sep 2016 - Oct 2017 · 1 yr 2 mos, Hyderabad Area, India

Linux Administrator at Exotel Techcom Private Limited, Mar 2016 - Aug 2016 · 6 mos, Bengaluru, Karnataka, India

Linux Administrator at E2E Networks Private Limited, Oct 2014 - Feb 2016 · 1 yr 5 mos, Vellore, Tamil Nadu, India

Education

Bachelor of Technology - BTech, Electrical and Electronics Engineering, Jawaharlal Nehru Technological University