Sunil Gentyala

Twenty years in enterprise security teach you something certifications alone never will: the distance between a well-designed control and a resilient one is measured not in policy documents, but in decisions made under pressure, at scale, with incomplete information. That gap is where Sunil Gentyala's career has lived.

He is Lead Cybersecurity and AI Security Consultant at HCLTech, where he manages offshore and onshore resources spanning multi-cloud security (Azure, AWS, GCP), enterprise identity and access management, application security, and AI/ML security for Fortune 500 clients including Uber, Disney, and Royal Caribbean. He serves as HCLTech's designated expert representative to the Cloud Security Alliance.

As a scholarly researcher, his agentic AI security work has moved from internal tooling to externally cited reference material. AegisSwarm-Core, his zero-trust governance framework for autonomous multi-agent AI networks, was published by the Cloud Security Alliance and has been cited independently — including by security researcher Asaf Nakash as "one of the few serious attempts to contain coordinated multi-agent systems." His broader agentic AI portfolio spans the GSH Framework (Governed Security Hunting, threat hunting mapped to MITRE ATLAS and NIST CSF 2.0), TRACE-MAS (cryptographically secured multi-agent LLM pipelines), ARGUS (autonomous LLM vulnerability discovery), PRAVAL (agentic vulnerability assessment), and CausalNetTwin (causal digital-twin reasoning for network security) — alongside scholarly work on agentic AI governance published in the ISACA Journal and analyzed in CIO.com.

His post-quantum and quantum-adjacent security research addresses the migration problem enterprises are only beginning to confront. QuantumShieldEdge is a hybrid QKD-integrated federated learning framework for secure consumer IoT at the network edge (target venue, IEEE CCNC 2027), demonstrating 85.2% accuracy under 20% Byzantine participation versus 71.4% for vanilla FedAvg. ContextGuard-MCP-PQC, approved by IEEE ICSCSA 2026 and pending publication on IEEE Xplore once the conference concludes, applies RFC 9794's PQ/T hybrid terminology to Model Context Protocol across four security layers, hardening handshakes with hybrid ML-KEM/ML-DSA constructs against harvest-now-decrypt-later and downgrade attacks. His SC World analysis of enterprise post-quantum HTTPS migration is paired with hrpq-gap-scan, an open-source tool auditing HRPQ preload and cookie-scoping downgrade gaps. His research also extends into gate-based quantum computing itself: with Floriano Caprio, Matteo Tortora, and Paolo Soda, he co-authored a CIBB 2026 paper applying the Quantum Approximate Optimization Algorithm (QAOA) to clinical risk factor selection, executed on a 54-qubit superconducting quantum processor.

His research spans adversarial machine learning, MCP vulnerability analysis, post-quantum cryptography, and agentic AI governance. He holds over 20 years of enterprise PKI and security architecture experience and has published across CSO Online, Dark Reading, SC World, Cyber Defense Magazine, and BiometricUpdate.com. He holds a #FoundryExpert designation across IDG/Foundry publications (CSO Online, CIO.com, Computerworld) and has been featured on Decoded: The Cybersecurity Podcast.

He is an IEEE Senior Member (No. 101760715, ORCID: 0009-0005-2642-3479), active ISACA Professional Member (ID: 2297870), MBCS (British Computer Society, Professional Member No. 995177441), an ACM Professional Member (No. 6835079), a CIISec Affiliate (Chartered Institute of Information Security, No. 220270), and is pursuing IET Fellowship (FIET).