Hare Krishna Rai

DevOps Engineer

India2 yrs 7 mos experience

AI EnabledAI ML Practitioner

Key Highlights

Specialized in securing GenAI systems.
Conducted multi-cloud red teaming projects.
Presented at Black Hat Europe and DEF CON.

Stackforce AI infers this person is a Cybersecurity Specialist with a focus on AI and Cloud Security.

Contact

Skills

Core Skills

Ai SecurityApplication SecurityVulnerability ManagementProduct SecurityAi Security TestingGenai SecurityInformation Security Engineering

Other Skills

AIAWS Command Line Interface (CLI)Access ManagementAgile MethodologiesAmazon EC2Amazon EKSAmazon S3Amazon Web Services (AWS)Application Security ArchitectureBurp SuiteC (Programming Language)C++Cloud SecurityCluster ManagementCode Review

About

As a Product Security Engineer, I specialize in securing GenAI systems like Azure OpenAI and AWS Bedrock while addressing software supply chain security risks. With over 3 years of experience, I have conducted source code reviews, vulnerability assessments, and completed multi-cloud red teaming projects across AWS, Azure, and GCP, enhancing cloud and container security. I actively collaborate with development teams to prioritize vulnerabilities, implement software composition analysis, and deploy defenses against supply chain attacks. As a Black Hat Europe Arsenal, DEF CON 32 DemoLabs, and AppSec Village Presenter, I’ve showcased Damn Vulnerable SCA (SCAGoat), a project aimed at addressing critical software supply chain vulnerabilities. My focus remains on driving innovation and securing dynamic technology landscapes.

Experience

2 yrs 7 mos

Total Experience

11 mos

Average Tenure

8 mos

Current Experience

Confidential

Security Engineer - L2

Oct 2025 – Present · 8 mos · Hybrid

Responsible for overall enterprise security, ensuring robust protection against threats.
Conducted AI security testing and penetration testing to identify vulnerabilities across products.
Implemented CI/CD security measures and cloud security controls to safeguard data.
Engaged in threat modeling and secure design reviews to enhance system integrity.

AI SecurityOffensive SecurityThreat ModelingVulnerability Assessment and Penetration Testing (VAPT)Application SecurityProduct Security

Okta

Security Engineer

Apr 2025 – Sep 2025 · 5 mos · Contract Role · Remote

Contract Role on the Payroll of BEE Talent Solutions.
Analyze and research about vulnerabilities from Snyk and Socket.dev to differentiate applicable and valid issues from false positives across Auth0 repositories.
Perform local testing of dependency upgrades to validate patch effectiveness and ensure application stability post-remediation.
Create and manage pull requests (PRs) to securely update third-party libraries without introducing regressions or service disruptions.
Automate workflows to streamline vulnerability validation, patch testing, and reporting processes, reducing manual overhead.

Supply Chain AttackGo (Programming Language)Code ReviewSecurity EngineeringApplication SecuritySecure Code Review+6

Highradius

4 roles

Product Security Engineer II

Promoted

Jan 2025 – Mar 2025 · 2 mos · Hyderabad, Telangana, India

Conducted cloud security assessments and implemented GenAI Security measures at HighRadius.
Researched TTPs for offensive security to enhance overall security posture.
Mitigated potential threats through proactive security measures.

Product SecurityAI Security TestingVulnerability Management

Associate Product Security Engineer - II

Jul 2024 – Dec 2024 · 5 mos · Hyderabad, Telangana, India

Spearheaded cloud security assessments and GenAI Security implementation at HighRadius, enhancing overall security posture.
Researched TTPs for offensive security to strengthen defenses.
Utilized SAST, DAST, and SCA for secure code review and threat mitigation.

MLAILLMGenAI SecurityThreat ModelingRed Team+4

Associate Product Security Engineer - I

Jun 2023 – Jul 2024 · 1 yr 1 mo · Hyderabad, Telangana, India

Performing scheduled vulnerability scans on a weekly and monthly basis to identify potential weaknesses and vulnerabilities.
Conducting comprehensive reviews of product source code, utilizing languages such as JAVA, Python, JS, Kotlin, etc., to identify and mitigate security risks.
Assessing EKS security to identify and address vulnerabilities in containerized environments, ensuring the secure deployment of applications.
Conducting application security assessments for GenAI based applications to identify and mitigate vulnerabilities and weaknesses in the application layer, enhancing overall system security.
Collaborating with development teams to prioritize and address security issues by providing guidance on secure coding and remediation techniques.
Evaluated and analyzed internally developed products and procedures to ensure they meet security requirements and effectively address concerns.
Delivered 15+ in-house training sessions on Secure coding and Secure GenAI based Application development

SASTApplication SecuritySecure Code ReviewSecure CodingInfrastructure SecurityPenetration Testing+3

Product Security Intern

Sep 2022 – May 2023 · 8 mos · Hyderabad, Telangana, India

Security Issue Triaging calls with development teams on remediation techniques and secure coding.
Review, analyse, and evaluate internally developed products and procedures to address security requirements and concerns.
Conduct weekly and monthly vulnerability scans.
Product Source Code Review including languages JAVA, Python, JS, Kotlin,etc.

Information Security EngineeringVulnerability AssessmentCode ReviewApplication SecuritySecure Code ReviewSecure Coding+1

Embifi

Full Stack Intern

Aug 2022 – Oct 2022 · 2 mos · India

Azure developer community

Organizer

Dec 2021 – Jun 2023 · 1 yr 6 mos · Prayagraj, Uttar Pradesh, India

Microsoft Azure

Cncf prayagraj

Lead Organizer

Jul 2021 – Jun 2023 · 1 yr 11 mos · Prayagraj, Uttar Pradesh, India

Pledge a smile

Fund Raising Intern

Sep 2020 – Oct 2020 · 1 mo · India

worked on a project "MUSKAAN" which aims at raising funds for providing essential Stationaries to Orphanage across India.

Cybersecurity

Bugcrowd

Security Researcher

Aug 2020 – Dec 2023 · 3 yrs 4 mos

Ethical HackingCybersecurity

Intentions

CTF Player

May 2020 – Mar 2021 · 10 mos · India

Linuxworld informatics pvt ltd

The Future of Cloud Computing : Hybrid Multi Cloud (AWS | OpenStack | Terraform | Kubernetes)

May 2020 – Jul 2020 · 2 mos

A Great Summer Training Program via Mr. Vimal Daga.

Entwicklers

Co-Founder

Feb 2020 – Jun 2023 · 3 yrs 4 mos · Allahabad, Uttar Pradesh, India

Cybersecurity

Lyricsbeen.com

Technical Lead

Jan 2020 – Jul 2020 · 6 mos · India

We worked on a lyrics website for 4 months to gain hands-on experience in SEO (Search Engine Optimization). lyricsbeen.com gained 2600 traffic per day within 3-months. We lost it as renewal of Domain and hosting was costlier and Google Ads has also been not accepting New Registration.