Senior Security Research Engineer at Harness — GenAI and MCP security, agentic threat modeling, and offensive tooling. I break autonomous agents until natural language turns into shell access, then ship the detections that catch it.
I'm a Senior Security Research Engineer at Harness, working on GenAI and MCP security, agentic threat modeling, and offensive tooling. Before that: AI-security engineering at Aikido and years of API security research at Cequence.
My days are spent red-teaming autonomous agents until natural language turns into shell access — then building Pinaka so the next person sees it coming. I've taken that work to 13+ conferences across three countries, and next to the DEF CON 34 Red Team Village.
An MCP-native platform, powered by Claude: autonomous recon agents, Shadow-AI hunting, and a Hunter dashboard — with confirmed Critical findings against real production targets. Its open-source agent-surface-action runs 19 rules (OWASP MCP/LLM Top 10 + MITRE ATLAS) in CI, with cross-commit drift detection for tool-poisoning and rug-pulls.
Continuous LLM red-teaming, multi-turn, auto-halt on a critical find.
Subdomain + API attack-surface recon for red teams.
LLM system-prompt vulnerability scanner, OWASP LLM Top 10.
An AI firewall for LLM input classification.
Live exploitation of autonomous AI agents — turning ordinary natural-language access into a shell, on stage, in real time.
I also hosted the AI Security Village at BSides Luxembourg 2026, and I've spoken across 13+ conferences in three countries. Two talks I keep being asked back for: API Underworld and Red Teaming the LLM Stack.
An exceptional level of curiosity and determination … an asset to any cybersecurity team.
Self-driven and hard-working, with a very bright future.
Talks, research, agent-security work, or just to trade notes on where all this is heading. Say hello at hello@pinaka.sh, or find me on LinkedIn and X.