Susovan Garai
Senior AI Security Engineer | AI/LLM Security | AppSec | DevSecOps | AWS & Kubernetes | Secure SDLC
Bengaluru
5+ years of work experience
Jun 20264 mosPresent
Bangalore Urban
▶️ AI red-teaming — prompt injection, jailbreaks, tool abuse, data leakage, guardrail bypass
▶️ Security testing of agentic workflows, RAG pipelines, and edge AI applications
▶️ Automation-first — red-team harnesses, eval pipelines, AI security testing wired into CI
▶️ Threat modeling and architecture review across the full SDLC, not just the release gate
▶️ Partnering with Dev and QA to define "secure enough" for non-deterministic systems
▶️ Findings and reports engineering teams actually act on
▶️ AI vulnerability management — triage, tracking, closure
▶️ Security sign-off on releases — AI features and traditional application changes alike
Sep 202510 mosJun 2026
Bengaluru
Owned application, cloud, and AI security end to end, from architecture review through production incident response.
▶️ AI/LLM Security: Built and ran Ushur's AI/LLM security program using MAESTRO threat modeling and the OWASP LLM Top 10, developing PoC exploits for prompt injection, data leakage, model abuse, and agentic system vulnerabilities before features shipped.
▶️ DevSecOps & Automation: Embedded SAST, DAST, and SCA into CI/CD pipelines (Jenkins, GitHub Actions), building paved security standards and gates that let teams ship securely without slowing down sprints. Backed this with Python and Bash tooling for SAST triage and vulnerability reporting.
▶️ Penetration Testing: Led web, API, and mobile (Android/iOS) penetration testing against the OWASP API Top 10 and ASVS, covering SSRF, SQLi, XSS, CSRF, JWT issues, auth bypass, IDOR, LFI, and privilege escalation.
▶️ Cloud & Infrastructure: Hardened AWS environments (IAM, logging, monitoring) and Kubernetes/EKS clusters, including namespace isolation and bastion based access controls.
▶️ Architecture Review: Reviewed product architecture and FSD documents for new features, pushing defense in depth design and secure data handling before code was written.
▶️ Incident Response: Owned the full IR lifecycle from detection through containment and post incident review.
▶️ Developer Enablement: Delivered secure coding training on OWASP Top 10 mitigations, input validation, and secure API design, and worked closely with engineering and product so security stayed part of the process instead of getting bolted on at the end.
▶️ Compliance & Reporting: Documented findings with PoCs and remediation guidance, keeping work aligned with HITRUST, SOC2, and ISO 27001 requirements.
Aug 20241 yr 2 mosSep 2025
Bengaluru, Karnataka, India
In my role as a Security Engineer at Ushur, I spearheaded AI/LLM Security Testing, integrated security into the SDLC, and conducted Incident Response and Recovery Activities. I fostered a security-first culture through training and workshops, ensuring a proactive approach to security measures.
Jan 20222 yrs 7 mosJul 2024
Bengaluru, Karnataka, India
▶️ Conducted Automated and Manual Penetration Testing (Web/Mobile/API/Network/Infra) for clients of different sectors like fintech, Pharmaceutical, ecommarce, etc.
▶️ Performed detailed Source Code Reviews (SAST) and Software Somposition Analysis (SCA).
▶️ Managed vulnerability identification, reporting, and remediation processes.
▶️ Took Cyber Security Training Sessions for interns.
▶️ Engaged with application teams to scope and assess security needs, ensuring effective and efficient security solutions.
Aug 20215 mosDec 2021
Bengaluru, Karnataka, India
▶️ Conducted ethical security assessments and penetration tests, delivering actionable security insights to clients.
▶️ Utilized a combination of automated tools and manual techniques to uncover and mitigate vulnerabilities.
Susovan’s AI Stack
Education
Bachelor of Technology - BTech, Computer Engineering
The neotia University
20174 yrs2021
Join Susovan and 10k+ other professionals on
Tal is the app where bosses meet engineers & builders directly, without middlemen
Download Tal Boss