Security Strategy, GRC & AI Risk
Open to security rolesSecurity that makes sense. Risk, policy and controls, turned into decisions people actually follow.
Sep 2026 to present
Automates SOC 2 and NIST CSF audit evidence collection and compliance reporting. LLM workflows map controls to owners, with prompt injection guardrails, output validation and a manager sign off step before anything is final.
Oct 2026
Threat modeled an OCPP charge point stack and tested 13 ETSI EN 303 645 provision areas. Documented 6 security gaps across authentication, TLS, firmware updates, exposed services, logging and input validation, each mapped to EN 18031 controls.
Feb 2026 to Aug 2026
Open source vulnerability intelligence platform that unifies 4 security sources through REST APIs and RAG. Correlates NVD CVEs with MITRE ATT&CK techniques, NIST 800-53 controls and Sigma detection logic in one analysis workflow.
Sep 2026 to present
Offline AI workflow for HAZMAT decisions, grounded in 49 CFR. Combines evidence retrieval, direct regulatory citations and output validation so every recommendation is traceable to the rule behind it.
Sep 2026 to present
Research at CyLab and SEI. A two stage self hosted LLM pipeline that automates vulnerability discovery, independent adjudication and severity ranking, benchmarked against SAST baselines on precision, recall and false positive rate.
Nov 2025 to Jan 2026
Auditable AI pipeline using Llama 3 and Arize Phoenix for model observability and decision transparency, with a forensic flight recorder built on OpenTelemetry. Analysed 38 LLM traces for injection and compromise and kept 3 vulnerable models out of production.
01/2026 - Fall 2026
Carnegie Mellon University
Selected as Student Representative for the ISPM cohort at Heinz College. Gather feedback from students, help shape events and programming, and support connection within the cohort to enhance the student experience.
01/2026 - Present
Carnegie Mellon University
Host weekly office hours and manage Canvas LMS including grading and course administration for 40+ graduate students. Provide technical guidance on product management projects and contribute to course improvement initiatives.
06/2024 - 06/2025
CredXO
Coordinated engineering workflows for 12-15 member development team at blockchain-based fintech startup. Enforced security and operational policies including repository access controls and confidential data handling protocols. Supported Shark Tank INDIA pitch preparation.
06/2023 - 08/2023
Hacker Bro Technologies
Completed intensive training in incident response, vulnerability assessment and security event monitoring using SIEM platforms. Practiced penetration testing techniques including network reconnaissance with Nmap, packet analysis using Wireshark and web application security testing with Burp Suite.
Security issues aren't always technical problems. Often they're communication problems. I work where risk, policy and engineering meet: assessing risk, mapping controls to frameworks, and making the case for the fix people will actually adopt.
Like an attacker and a defender at once. I've tested LLMs with malicious prompt injections, analysed real-world breaches down to their root cause, and built tooling that blocks risky changes before they ship.
Teams that treat security as a product: measurable, well-governed, and built with the people who use it. I'm always happy to talk shop.
The best conversations don't start with a checklist.
You don't need a perfect match to reach out, whether it's a role, a project, research, or just a conversation. If you're working on risk, compliance or AI security, I'd like to hear about it.
