BlogEngagementsResearchAboutExperienceProjectsSkillsBeyondContactGitHub

Bengaluru, India

Pradyoth Prashanth

Security Engineer II · AI/ML Data Platforms Product Security Lead · Gen AI Red Teaming

JPMorganChase

conversation-with-super-smart-llm — bash

About

Security at the frontier of AI.

Security Engineer II and AI/ML Data Platforms Product Security Lead at JPMorganChase — the firm's top red-team contributor, running adversarial testing across 8+ enterprise AI engagements and surfacing over 75% of all findings on the teams I've led.

Previously built the AI Controls Engineering platform that supports procurement and security review of 6,000+ externally sourced models across JPMorganChase's Model Development Lifecycle — one of the largest financial institutions running AI at enterprise scale.

I work at the intersection of adversarial AI, security engineering, and trust & safety — probing LLMs for prompt injection, data leakage, intent drift, and misuse scenarios, then turning those findings into controls that actually hold at enterprise scale. The field is still being defined, and generic solutions don't survive first contact with production.

3+

Years in AI security

8+

Enterprise AI red-team engagements

Experience

JPMorganChase

AI/ML Data Platforms Product Security Lead · Cybersecurity & Tech Controls

Feb 2026 — Present

Bengaluru, India

Security Engineer II

Top contributor on JPMC's Gen AI red team — running adversarial testing across 8+ enterprise AI engagements and designing the manual methodology the team uses against agentic systems.

  • Run adversarial testing across 8+ enterprise AI engagements using PyRIT, Promptfoo, garak, and vendor scanning tools — 10,000+ automated prompts per use case (malicious plugins, encoding jailbreaks, black-box and gray-box agentic tests) plus 2,000+ manual prompts across multiple turns per target.
  • Led assessments for Global Private Bank, Investment Bank Payments, Digital Banking, and the AI/ML Data Platform — surfacing issues severe enough that systems were re-architected before launch, and over 75% of all team findings, spanning prompt injection, encoded prompt bypass, system prompt leakage, guardrail architecture disclosure, and RAG overexposure.
  • Consistently the top contributor on red team assessments — uncovering more findings than the rest of the team combined.
  • Designed the manual assessment methodology the team uses against agentic architectures — targeting privilege misuse, intent misalignment, and multi-step exploitation paths that automated scanning misses entirely; helped enforce the firm's Control Procedure for red teaming AI systems.
  • Every red-team finding ships with impact analysis and remediation recommendations — concrete controls partner teams use to close the gap, not just a list of vulnerabilities.
  • Designing a scalable firmwide self-service red-teaming service: distributed adversarial testing on AWS with per-scanner task isolation, auto-scaling, and consolidated security report generation — MVP built on Promptfoo.
  • Deployed the Network Broker handling egress and ingress for vendor-based SaaS connectivity.
PythonAWSPyRITPromptfooGarakECSLLM SecurityAgentic Red Teaming

JPMorganChase

AI Controls Engineering · Cybersecurity & Tech Controls

Jul 2023 — Jan 2026

Bengaluru, India

Security Engineer I

Built the AI/ML security control layer that gates every externally sourced model entering JPMC — preventing vulnerable or tampered models from reaching production systems that touch trillions in assets.

  • Researched, designed, and shipped the model file scanning platform that gates every externally sourced model entering JPMC — 6,000+ models — with admission scanning at procurement plus periodic re-scanning of already-procured and home-grown artifacts, enforcing 2 Control Procedures.
  • Built the scoring engine for the firm's model security inference testing tool — a risk-ranking layer over raw vulnerability-scanner output.
  • Shipped an automated Kafka-based compliance pipeline covering 2,500+ models, then migrated it to an API-based architecture once the data volume no longer warranted consumer-producer overhead.
  • Cut AWS billing by over $7,000 per environment (dev, test, prod) through an infrastructure revamp, lifecycle policies, and storage-class optimization.
  • Spearheaded integration with the firm's CDAO Platform Registry for AI.
  • Built a deserialization scanner for model files (protobuf, messagepack, h5), later replaced with a vendor-integrated solution to cut maintenance overhead.
  • Designed the consolidated security report for file-scanning results — combining multiple tool outputs per model, integrated into the firm's AI Registry with a per-model security-review tab.
  • Migrated deployments from Jenkins to Spinnaker; cut end-to-end test execution by ~67% and enforced secure-coding standards across the SDLC.
Java (Spring Boot)PythonAWSKubernetesTerraformKafkaSpinnakerJenkinsMySQLGrafanaGarak

JPMorganChase

AI Controls Engineering · Cybersecurity & Tech Controls

Jan 2023 — Jun 2023

Bengaluru, India

Software Engineer Intern

Shipped production backend code for the ML scanning platform on day one — treated as a full engineer, not an intern. Recognized with the Super Squad Team Award for delivery quality.

  • Built the core backend services and REST APIs that power the model scanning workflow — job orchestration, status tracking, and evidence collection — forming the operational backbone of what became a firm-wide ML security platform
  • Brought test coverage from near-zero to 80% by authoring unit and integration test suites for every new feature, catching regressions early and enabling reliable release cadence
  • Cut non-production cloud spend by over 60% by implementing Lightswitch scheduling, Janitor cleanup policies, and S3 Lifecycle tiering
  • Standardized infrastructure-as-code across DEV, UAT, and PROD with Terraform — eliminating configuration drift and ensuring consistent, auditable deployments across all environments
Java (Spring Boot)REST APIsSQLKubernetes/EKSTerraform

LogicHive Solutions Pvt. Ltd.

Aug 2021 — Feb 2022

Mysuru, India

Engineering Intern

Designed and built a real-time asset tracking system from scratch — hardware to backend — giving enterprise clients live visibility into physical asset location and movement for the first time.

  • Engineered the full tracking stack: Raspberry Pi + BLE beacons for device detection, MQTT for low-latency telemetry transport, and Redis for sub-millisecond location state reads — all integrated into a working PoC in 7 months
  • Built the complete data pipeline — ingestion, processing, and visualization — enabling operations teams to monitor asset location, movement history, and status in real time, replacing a previously manual inventory process
Raspberry PiBLE BeaconsMQTTRedisNode.jsPython

Projects

Building at the edges of AI.

Biocomputer Simulator

2026

Synaptic Wetware

🧠 Organoid Intelligence Biocomputer Simulator — HH + Izhikevich neuron models, MEA burst detection, DishBrain Pong, Baltimore Declaration ethics monitor.

ReactTypeScriptPhysicsMath

AI Security Red Teaming Playground

2026

Prompt Injection CTF

A seven-level attack playground covering prompt injection, roleplay jailbreaks, intent drift, token smuggling, indirect document injection, and agent tool abuse — each mapped to OWASP LLM Top 10 and MITRE ATLAS. A pattern-matching engine scores attempts instantly with no model API calls, and a defender mode reveals the guardrail code that would block each successful attack.

Next.jsTailwindCSSOWASP LLM Top 10MITRE ATLAS

Evaluation Suite

2026

Weighted Safety Refusal

Severity-weighted LLM safety evaluation suite. Measures absolute refusal robustness across prompt injection, jailbreaking, data exfiltration, toxicity, and malware generation — with risk-adjusted category weights and a custom model-graded scorer.

PythonEvaluationLLMs

Boundary Testing & Runtime Enforcement

2026

Akrivon AI

Boundary testing and runtime enforcement for deployed AI. IntentScan generates adversarial probes against any AI API — role transformation, gradual drift, language variation — and scores capability, role, and domain violations through an LLM judge into a 0–100 risk report. IntentEnforce is a runtime proxy that classifies user intent per request and applies allow / block / clarify policy before traffic reaches the model.

Python 3.11FastAPIReactTypeScriptFirebase

Open Benchmark · Apache-2.0

2026

AgentInjectionBench

Open benchmark for evaluating prompt injection against agentic tool-use pipelines and MCP-style integrations — the attack surface that appears only once a model can call tools, and that single-turn safety benchmarks do not cover.

PythonAgentic AIMCPBenchmarking

Contributed to Anthropic Claude Code · PR #62099

2026

Credential Guard

A runtime security guardrail proposed to Anthropic's Claude Code (open PR) that intercepts agent tool calls and blocks credential writes before they reach disk — covering 20+ pattern families: GitHub PATs, AWS and API keys, PEM certificates, and database URLs with embedded passwords.

PythonAgent SecurityStatic Analysis

Innovation Week · JPMorganChase

2026

JPMCode

A runtime enforcement layer that gates coding-agent actions against JPMC standards and protocols — with MCP integrations for Jira, Confluence, and JPMC's internal Global Tech Assistant to keep agent-driven development within organizational guardrails.

MCPAgent SecurityPython

JPMorganChase Innovation Week

2025

Model Vulnerability Scoring System

There was no standardized way to score AI model vulnerabilities the way CVSS scores software CVEs. Built an AI-VSS: a Model Vulnerability Scoring System that assigns reproducible, comparable risk scores.

PythonEmbedding ModelsCVSSAI Attack Library

DEVUP 2026 · JPMorganChase

2026

AEGIS

Traditional disaster recovery relies on mutable logs — logs that can be corrupted or tampered with before recovery kicks in. AEGIS anchors critical JPMC system state to Hyperledger Fabric's immutable ledger, then layers an AI monitor that detects anomalies and triggers recovery before failures cascade. Presented at DEVUP 2026, JPMC's invite-only technical conference.

Hyperledger FabricSolidityPythonAI

Major Project · NIE Mysuru

2022

Mindful-Me

Built a full-stack mental health platform that detects emotional state in real time using two signal sources — OpenCV for facial affect recognition and BERT for text sentiment — then matches users with nearby therapists by proximity and specialty. Designed to make mental healthcare accessible at scale, for users who otherwise have no path to professional support.

Vue.jsFlaskOpenCVTensorFlowBERTAppwrite

Nokia Bangalore University Conclave · Top 5

2021

Stock Price Prediction

Challenged the single-signal assumption behind most stock prediction models. Built a hybrid forecasting system that fuses an LSTM time-series model, live market sentiment scraped from news and social feeds, and fundamental intrinsic value calculations. The three-signal ensemble consistently outperformed any individual component — recognized in Nokia's Top 5 at the Bangalore University Conclave.

PythonLSTMNLPSentiment AnalysisML

Minor Project · NIE Mysuru · Best Project Award

2021

Schmaltz Surveyor

Ran a rigorous four-way classifier benchmark on live tweet sentiment — SVM, Random Forest, Logistic Regression, and kNN — Random Forest won. Shipped V2 with GCP Natural Language API integration, which lifted accuracy further by leveraging Google's pre-trained contextual models on ambiguous language. Awarded Best Project (1st Place) by Department of ISE, NIE and CSI-Mysore chapter.

Pythonscikit-learnGoogle Cloud NLPFlask

Independent Research

Breaking production AI.

28+ vulnerabilities across 9 live AI products, found on my own time and disclosed responsibly — prompt injection chains, agentic tool abuse, RAG spoofing, and persistent memory backdoors.

9
Products broken
28+
Findings disclosed
4
Critical severity
Jack & Jill AINotion AIPriceline (Penny)Brave LeoMeta AI (WhatsApp)Anthropic Claude Code

SSRN preprint, June 2026. Weighted Safety Refusal: A Reference-free, Severity-weighted, Dual-axis Metric for Evaluating LLM Refusal Behavior

View all research →

Skills

What I work with.

Offensive AI Security

Manual & Automated Red TeamingPrompt Injection (Direct / Indirect / Encoded)Agentic ExploitationTool Schema DisclosureRAG Context SpoofingGuardrail BypassJailbreak ChainsPyRITGarakPromptfooOWASP LLM Top 10OWASP Agentic Top 10MITRE ATLASNIST

Defensive AI Security

Model Supply-Chain & Artifact ScanningpicklescanModelScanClamAVYARA RulesSnykDeserialization Scanners (protobuf / msgpack / h5)LLM Security Inference TestingProtect AI GuardianRobust Intelligence

Languages

PythonTypeScript / JavaScriptJavaBashGoSQL

Frameworks

FastAPIFlaskDjangoSpring BootNext.jsReactVue.jsREST APIs

Cloud & Infrastructure

AWSKubernetesDockerTerraformSpinnakerJenkinsKafkaLinux

Databases

MySQLMongoDBRedis

Speaking & Teaching

Talks, workshops & lectures.

Talks, workshops, and lectures on AI security and red teaming — at conferences, universities, and community events.

View engagements →

Beyond the code

Community, creativity, impact.

Security engineering is what I do — but curiosity has taken me into AR, photography, STEM education, and community building along the way.

Under 25 · May 2021 — Apr 2022

Snapchat Opinion Leader

6.5M views

Built a hyperlocal campus AR community crafting ~80 Lenses using Snapchat Lens Studio. Lenses collectively reached 6.5 million views — the top-performing greenscreen lens alone hit 2.95 million.

Department of Tourism, Karnataka · Apr 2017 — Sep 2018

Official Photographer

2 years

Team photographer for the internationally recognized Mysuru Dasara festival in 2017 and 2018 — one of India's most celebrated cultural events, drawing visitors from across the globe.

Beneath-a-Tree Education · Feb 2022 — Mar 2022

STEM Trainer

550 students

Delivered hands-on STEM education and hackathons to 550 female students across rural schools in Gujarat, bridging the gap between theoretical knowledge and practical application.

JPMorganChase · Mar 2024 — Jan 2025

SEP Engineer Committee Lead

1,100+ engineers

Led the early-career engineer committee at JPMorganChase's Bengaluru Tech Centre, owning end-to-end planning and on-site execution for flagship events — SEPx, SEP Connect, SEP Welcome Day, Breakout Blitz, and Graduation Day — for 1,100+ engineers. Served as EMCEE at multiple events; coached incoming committee leads on vendor selection, process rigor, and BTC procedures.

Education & Recognition

2019 — 2023

CGPA 9.11 / 10 · First Class with Distinction

The National Institute of Engineering, Mysuru

B.E. Information Science & Engineering

Accomplishments

  • Presented at JPMorganChase's Invite Only Technical Conference DEVUP 2026, Hyderabad
  • Inventor Recognition — JPMC BTC Q4 2025
  • Super Squad Team Award — JPMorganChase Cybersecurity and Tech Controls R&R (Q3 2023)
  • Winner — Nokia Bangalore University Conclave Debate (2022 & 2021)
  • Best Project (1st Place) — "Schmaltz Surveyor" at CSI & ISE Dept. Project Expo, NIE (2022). Also awarded by Dept of ISE, NIE and CSI-Mysore chapter
  • Top 5 Project award — "Stock Price Prediction" at Nokia Bangalore University Conclave (2022)
  • I Prize — Vigilance Awareness Week Debate, NIE (2022)
  • I Prize — Captivate, A Photo-Story Competition, Onyx Entrepreneurship Cell, NIE (2022)
  • Awarded as 'Master SOL' by Under25 for session on AR & Lens Studio (2021)
  • II Prize — Mock IEEE Xtreme 2.0 Coding Competition, IEEE Bangalore Section (2021)
  • III Prize — Mock IEEE Xtreme 1.0 Coding Competition, IEEE Bangalore Section (2021)
  • II Prize — BIBLUS National Level Paper Presentation Competition, NIE IEEE Student Branch (2021)
  • Most Active Member — NIE IEEE Student Branch (2020)
  • Official Photographer — Mysuru Dasara, Government of Karnataka (2017 & 2018)

Languages

English

Professional

Kannada

Native

Hindi

Working

Writing

Latest Articles

Loading articles...

Latest

What's new in AI security.

Real-time updates from the AI security frontier — latest research, vulnerability disclosures, and threat analysis from trusted sources.

Contact

Let's talk AI security.

Interested in conversations about AI safety, red teaming, LLM security controls, or what it takes to secure AI systems at enterprise scale. Always open to connecting.

Emailppradyoth64@gmail.comGitHub/ppradyothLinkedIn/in/ppradyothInstagram@ppradyoth

Pradyoth Prashanth

GitHub Developer Program
Mysuru · 2026ಮೈಸೂರು · 2026Mysuru · 2026