Aarsh Chaurasia

Founding Security Engineer Intern — Vaatun

Aug 2026 – Present

Building sovereign AI infrastructure and agentic security tooling for production AI workloads.

Key contributions

• Architected sovereign AI inference across multi cloud infrastructure, migrating workloads from third party model APIs to controlled infrastructure to strengthen data security and privacy
• Built agentic AI security scanners and automated security pipelines, strengthening security controls across production AI workflows and reducing security and operational risk
• Optimized cloud infrastructure and agentic AI workflows, improving uptime while reducing costs by ~30%

Sovereign AI · Agentic AI Security · Cloud Infrastructure · Security Automation

Security Assurance Intern — Microsoft

May 2026 – Jul 2026

Built AI driven security testing infrastructure for internal Microsoft MCP servers with the Azure DevSec Team.

Key contributions

• Built an AI driven security testing platform for internal Microsoft MCP servers using advanced static analysis and agentic AI dynamic analysis to identify security weaknesses at scale for the Azure DevSec Team
• The platform identified and validated vulnerabilities across internal MCP ecosystems including authorization flaws, unsafe tool exposure and capability escalation paths through automated hybrid security analysis
• Developed distributed orchestration pipelines to simulate multi step agent interactions and runtime execution flows for large scale security testing of enterprise AI infrastructure

MCP Security · AI Red Teaming · Static & Dynamic Analysis · Agent Orchestration

Product Security Intern — we45

Jul 2025 – Mar 2026

Product security and DevSecOps for enterprise SaaS platforms.

Key contributions

• Designed and implemented DevSecOps CI/CD security pipelines for large scale enterprise SaaS platforms using GitHub Actions with SAST, DAST, dependency and secret scanning
• Triaged and analyzed 300+ security alerts, vulnerability findings and scan results across CI/CD pipelines and production systems achieving time to triage under 24 hours and prioritizing exploitable vulnerabilities
• Performed web and API security testing for an enterprise communications platform aligned with the OWASP Top 10, identifying authorization, access control, data exposure and business logic flaws
• Served as a bug bounty triager for an enterprise software vendor, validating submissions through manual security analysis and controlled testing, reviewing 100+ reports and contributing to signal validation and monitoring workflows

DevSecOps · CI/CD Security · API Security · Bug Bounty Triage

Founder — Okynus Tech

Apr 2024 – Jun 2025

Founded and led an enterprise security venture incubated under IIT Kanpur's C3iHub.

What I did

• Architected a patent grade encryption algorithm and data protection mechanisms for OkSentinel, a proprietary secure data sharing platform leveraging novel algorithms to protect sensitive enterprise data
• Built an agentic AI retesting system for OkNexus to automatically revalidate security findings within CI/CD pipelines, reducing manual triage effort by ~70% and accelerating verification turnaround
• Led technical validation and security architecture across application security, cloud security and threat modelling, taking Okynus from product validation to a ~$500K valuation through IIT Kanpur C3iHub and SSIP 2.0

Applied Cryptography · Agentic AI · Security Architecture · Founder

Security Engineer Intern — SecureDApp

May 2025 – Jul 2025

Worked on penetration testing and security auditing for application platforms and internal security tooling.

What I did

• Performed penetration testing on web applications identifying vulnerabilities in authentication flows access control mechanisms and application logic
• Conducted security assessments focusing on attack surface analysis misconfigurations and security weaknesses across application environments
• Contributed to testing and evaluation of an AI driven firewall auditing platform designed to analyze security configurations and highlight potential defensive gaps

Penetration Testing · Application Security · Security Auditing

Backend Security & Development Intern — Login2Xplore

Sep 2024 – Apr 2025

Worked on backend systems and internal developer tools focused on data infrastructure API development and secure data handling.

What I did

• Built a File Array Manager tool enabling secure upload preview and management of multiple file types through a token based API
• Improved the XDSArray backend system to enhance scalability reliability and data handling performance
• Developed the XDSArray API providing a modular interface for secure high performance data storage and retrieval with token based access control
• Built a JPDB API Explorer tool for testing and debugging live API requests improving backend development workflows and secure API validation

Backend Engineering · Secure API Development · System Architecture

Data Security Analyst Intern — CM Office Gujarat

Nov 2024 – Dec 2024

Worked on analyzing large scale government datasets to identify security anomalies and potential fraudulent activities.

What I did

• Analyzed large datasets to detect anomalies patterns and suspicious activity indicating potential fraud or misuse
• Investigated irregular data patterns and helped identify cases of fraudulent activity within government program datasets
• Supported data security efforts by improving monitoring approaches for identifying abnormal behavior across data systems

Data Security · Fraud Detection · Anomaly Detection · Data Analysis

Summer Research Intern — Florida International University

Jun 2024 – Sep 2024

Conducted research on challenges posed by modern encryption in mobile operating systems and their impact on digital forensic investigations.

What I did

• Co authored research on improving mobile device forensics using dynamic analysis AI assisted pattern detection and cloud based forensic techniques
• Designed simulations to analyze encrypted systems and observe transient decrypted states during runtime
• Used tools such as Frida and Xposed Framework to monitor application behavior and identify potential weaknesses in encrypted environments
• Explored scalable forensic approaches using cloud based analysis for distributed data and key management systems

Mobile Forensics · Encryption Security · Dynamic Analysis · Security Research

CTO / Technical Co-founder — Stealth Startup (Acquired)

Feb 2022 – Apr 2025

Built and led a technology driven startup focused on improving digital visibility and performance for online platforms.

What I did

• Played a key role in scaling the startup and improving client outcomes contributing to the company’s eventual acquisition
• Led development and execution of SEO strategies that improved online visibility traffic growth and overall platform performance for clients
• Designed a custom SEO optimization engine to automate analysis and optimization of website structures and search performance
• Used data driven insights to continuously refine campaigns improve search rankings and support client growth objectives
• Worked closely with product and engineering teams to integrate optimization tools and maintain efficient scalable workflows

Startup · CTO · Engineering Leadership

Lead — Google Developer Student Clubs (GDSC)

Jun 2023 – Jun 2024

Led the university chapter of Google Developer Student Clubs fostering a community focused on learning building and collaboration in modern technologies.

What I did

• Successfully completed multiple GDSC campaigns driving strong student participation and engagement across the university
• Organized and hosted technical workshops and events on Android development cloud computing and AI ML with large student attendance
• Led hands on sessions hackathons and coding challenges helping students build practical technical skills
• Collaborated with industry professionals and guest speakers to deliver technical sessions and mentorship opportunities
• Managed and coordinated a team to plan events run community initiatives and expand overall club participation

Developer Communities · Technical Leadership · Event Organization · Community Building

EngineerSec

AI native platform that automates threat modeling, vulnerability discovery, remediation and CI/CD security. It turns architecture and code context into prioritized, exploitable findings and drives fixes straight through the pipeline.

AI Security · Threat Modeling · CI/CD Security · Automated Remediation

Intelligent Storage Evidence Analyzer

Agentic AI powered forensic system that detects intentional disk wiping and identifies the tools used in data destruction. It analyzes disk images using entropy detection tool fingerprinting and behavioral intent modeling to support digital forensic investigations.

Agentic AI · Digital Forensics · Disk Analysis · Threat Investigation

Source code

PayloadScope

Machine learning system that classifies malicious web exploitation payloads such as XSS SQL Injection SSTI and Command Injection using TF IDF character n gram vectorization with a Logistic Regression multi class classifier. The system normalizes encoded inputs before analysis and supports both a REST API for automated pipelines and a GUI for manual payload inspection.

Application Security · Machine Learning Security · Payload Analysis · Threat Detection

Source code

PhishSOC-AI

PhishSOC-AI is an advanced, AI driven phishing detection platform designed for Security Operations Centers (SOC). It automates phishing email analysis through multi layered inspection, combining NLP-based sentiment classification, threat intelligence enrichment, screenshot forensics, and real-time Splunk integration

AI Security · Phishing Detection · SOC Automation · Threat Intelligence

Source code

SecuriForge

SecuriForge is a unified binary security and risk analysis framework that combines hardening checks, reverse engineering risk assessment, malware tampering detection, and SBOM generation into a single tool.

Binary Security · Malware Analysis · Reverse Engineering · SBOM Analysis

Source code

Navigating the Frontiers of Encryption in Mobile Forensics

Mobile forensics with hybrid AI and cloud computing · Florida International University Journal · 2023

This paper explores advanced approaches to overcoming encryption challenges in mobile device forensics by leveraging AI algorithms alongside cloud computing resources.

Towards Behavioural Secure Authentication Using Keystroke Dynamics

Biometric authentication with ensemble machine learning classifiers · Upcoming · 2025

Presents a keystroke dynamics-based authentication framework using ensemble classifiers (SVM, KNN, Random Forest), emphasizing accuracy improvements and dynamic thresholding to reduce false rejections.

Complex Resource Allocation and Energy Consumption in 5G and Modern Wireless Networks

Analyzing energy efficiency challenges in advanced wireless technologies · Upcoming · 2025

Investigates the complexities of resource allocation in 5G and beyond networks, highlighting causes of higher energy consumption and proposing potential optimization strategies.