Staff security engineer × peer-reviewed AI-safety researcher. Today: Zero Trust at Parafin (YC, $750M valuation). Three peer-reviewed publications in 2026 — open access, CC-BY 4.0: EmbedGuard (RAG security · IJCESEN) · GenOps (AI-in-CI/CD governance · JISEM) · RuntimeGuard-AI (EU AI Act Article 14 compliance · JoCAAA).

name: Neeraj Kumar Singh Beshanelocation: San Francisco Bay Area, CAcurrent_role: Staff Security Infrastructure Engineer @ Parafinprevious: [Meta Reality Labs, Raymond James, Wayfair, JPMorgan Chase, American Express]experience: 15+ yearsfocus: Security Infrastructure × Distributed Systems × AI Safetypublications: 3 peer-reviewed (2026) · PerceptFence DOI support artifactwriting: Technical articles on LinkedIn, Dev.to & Hashnode · "Securing the Agentic Stack" newsletterspeaking: Conf42 DevOps, Conf42 LLMs, CIMA 2026 — delivered talks

Three peer-reviewed papers published in 2026 — all open access (CC-BY 4.0). Each project bundles paper + code + (where applicable) invited talk.

Cross-Layer Detection and Provenance Attestation for Adversarial Embedding Attacks in RAG Systems · IJCESEN, Vol 12 No 1, pp 589–602 · 2026-02-05

Production RAG systems are vulnerable to adversarial embeddings — poisoned vectors that look right under cosine similarity but steer downstream generation. EmbedGuard combines embedding-space anomaly scoring with provenance attestation, so an attack has to defeat both layers at once.

Key results:94.7% detection rate on optimization-based attacks · 51 ms mean latency overhead · evaluated on a 500K-embedding production-scale system · Docker-reproducible benchmarks.

A Governance-First Architecture for Embedding Generative AI into CI/CD Pipelines · JISEM, Vol 11(1s), pp 1518–1539 · 2026-02-15Companion talk:Conf42 DevOps 2026 — invited speaker

A four-pillar framework for running GenAI inside production CI/CD without breaking governance: contextualization, strategic guardrails, deployment assurance, and governance audit trails.

Key results:55.7% reduction in median deployment cycle time (52.8 → 23.4 min, p < 0.001) · zero safety policy violations · 47.2% reduction in error-budget variance · evaluated across 15,847 deployments / 127 microservices / 8 months / 3 organizations.

Scalable Tamper-Evident Accountability for High-Risk AI Systems Under the EU AI Act · JoCAAA, Vol 35 No 1, pp 1074–1090 · 2026-01-31Companion talk:Conf42 LLMs 2026 — invited speaker · verified speaker certificate

An open-source compliance architecture for EU AI Act Article 14. Uses Groth16 zero-knowledge proofs on the bls12-381 curve to deliver cryptographically rigorous, tamper-evident audit trails inside a production latency budget.

Key results reported in the paper:2.3–4.1% latency overhead · 62 ms witness generation · 1,389 ms total proving time at 50K-constraint scale.

Content-Mediation Architecture and Deterministic Coverage for Screen-Share AI Assistants · Zenodo v0.3.0 · 2026-07-10

Public research and reproducibility artifact with Asmita Negi. The Zenodo record includes the revised manuscript and archive, but it is not peer reviewed and is not counted as a fourth scholarly paper.

Technical writing on LinkedIn, Dev.to and Hashnode — agentic AI security, MCP risk, RAG, Zero Trust, distributed systems. Weekly newsletter: "Securing the Agentic Stack".

Each chapter built on the last — from writing COBOL adapters to architecting Zero Trust infrastructure.

2025 ──────── PARAFIN ──────────────────────────────────────── present
Dec Staff Security Infrastructure Engineer
├─ Architecting Zero Trust for a platform with $35B+ in capital offers extended
├─ Partners: Amazon, DoorDash, Walmart, TikTok Shop
├─ Security mock drills, incident response, BC/DR, PII governance
└─ YC-backed, $750M valuation
2024 ──────── META (REALITY LABS) ──────────────────────────── 2025 Dec
Jun Staff Software Engineer
├─ Led CI/CD modernization (Project Chesterfield) for Quest & Ray-Ban
├─ GenAI migration tool: 95% manual effort reduction, $386K/yr savings
├─ UBM metadata service: 100K+ build ops/month, 99% failure reduction
├─ Onboarding assistant: 55% oncall reduction, adopted by 3 teams
└─ Mentored 6 SEs (3 promoted to Staff within 12 months)
2024 ──────── RAYMOND JAMES ────────────────────────────────── 2024 Jun
Apr Lead Software Development Engineer
├─ Document generation platform: 8K-12K docs/month, 99.2% success
└─ Established 95% code coverage standard across team of 8
2022 ──────── WAYFAIR ──────────────────────────────────────── 2024 Mar
Jan Technical Architect / Principal
├─ DevSecOps platform: 50M+ security checks/month
├─ Kubernetes policy-as-code engine (3% false positive rate)
├─ Unified OAuth 2.0: 125M+ API calls/week, 99.97% uptime
├─ Selected as 1 of 3 architects from 50+ for security roadmap
└─ Mentored 20+ engineers (8 promoted to senior/staff)
2019 ──────── JPMORGAN CHASE ───────────────────────────────── 2021 Dec
Mar Senior Software Engineer (CIB)
├─ Escrow platform: $40B+ in deposits
├─ Saga-pattern payment service: 10K+ daily transactions
└─ Auth framework adopted by 18+ CIB teams
2011 ──────── AMERICAN EXPRESS (via TCS) ───────────────────── 2019 Mar
Dec Systems Engineer → Senior Software Developer
├─ Monolith to microservices: 60% code reduction, 66% faster APIs
├─ B2B integration: 2M+ monthly requests, 15+ carrier partners
├─ Locations: Bangalore → Montevideo → Phoenix
└─ This is where the journey began 🚀

Languages Java · Python · Go · TypeScript · Groovy
Frameworks Spring Boot · FastAPI · Node.js · React
Cloud AWS · GCP · Kubernetes · Terraform · Docker
Security Zero Trust · IAM · Policy-as-Code (OPA/Kyverno) · TLS/mTLS · ZK proofs (Groth16)
Data Kafka · PostgreSQL · Cassandra · Redis · BigQuery
AI/ML RAG Pipelines · LLM Integration · Prompt Engineering · MCP · AI Safety
DevOps CI/CD · GitOps · ArgoCD · Datadog · PagerDuty
Patterns Microservices · Event Sourcing · CQRS · Saga · mTLS

🐶 Dog Dad Proud parent of Byte, a mischievous beagle
🎮 Retro Gamer Still speed-running Contra on NES
✈️ Global Dev Coded in Bangalore, Montevideo, Phoenix, Tampa, San Francisco
🚴 Trail Explorer System design on two wheels