About
Nineteen years of enterprise security, now focused on AI systems and the cryptography beneath them.
I am Lead Cybersecurity and AI Security Consultant at HCLTech and the company's designated expert representative to the Cloud Security Alliance. My day job is enterprise security architecture across multi-cloud, identity and access management, application security and AI/ML security. My research is where I test the ideas that day job raises.
The work centres on six areas. AI security and offensive and defensive security cover agentic systems and the Model Context Protocol, from adversarial testing of LLM and RAG applications to governance frameworks such as AegisSwarm-Core, which the Cloud Security Alliance published. Privacy engineering keeps sensitive data away from places it should not reach, including DLP for LLM prompts. Post-quantum cryptography addresses hybrid ML-KEM and ML-DSA migration and harvest-now-decrypt-later exposure. Clinical research and security applies quantum optimisation to clinical risk modelling, in work with Floriano Caprio, Matteo Tortora and Paolo Soda.
I write for practitioners in CSO Online, CIO, SC World, Cyber Defense Magazine, Security Boulevard and the Cloud Security Alliance, and for researchers in IEEE conferences and journals. I review for IEEE and other venues, including the Cyber Defense Review of the U.S. Army Cyber Institute.
I hold a B.Sc. in computer science, physics and mathematics from SRM College, Kakatiya University (2003). Research is conducted independently; the views here are my own.