Senior Technical Lead - AI Security Researcher @ Cisco | Ex-Meta | Ex-AWS

I'm an AI Security Researcher specializing in securing AI systems at scale. Currently at Cisco, I lead initiatives to secure AI systems across networking, security, and infrastructure products. My expertise spans model safety guardrails, prompt-injection protections, compute isolation, and secure token management.

Previously, I've held senior security roles at Meta and Amazon Web Services (AWS), where I pioneered GenAI security practices for flagship products like Amazon Q and Bedrock.

Beyond my corporate roles, I'm deeply involved in the open-source security community through OWASP, where I co-lead initiatives to establish industry-wide security standards for AI systems.

• 🛡️ Securing agentic AI systems and multi-agent architectures
• 🔐 Developing security frameworks for Model Context Protocol (MCP)
• 📝 Authoring research papers and security standards for GenAI
• 🎤 Speaking at security conferences (RSA, OWASP Global AppSec, BSides)

• Co-Lead & Founding Member - OWASP AIVSS (AI Vulnerability Scoring System)
• Workstream Co-Lead - OWASP GenAI Security Project - Agentic Security Initiative (ASI)

Contributing to the development of comprehensive threat modeling guides for multi-agentic systems and establishing security best practices for generative AI applications.

Scan MCP servers for potential threats & security findings. An open-source tool to identify vulnerabilities in Model Context Protocol implementations.

Scan Agent-to-Agent (A2A) frameworks for potential threats and security issues. Helps organizations secure interconnected networks of autonomous agents.

A community-maintained database of known vulnerabilities, limitations, and security concerns with the Model Context Protocol.

A comprehensive security framework for protecting LLM applications from tool poisoning and rug pull attacks through cryptographic verification and OAuth integration.

Comprehensive security standards and resources for agentic AI systems.

Regular speaker at major security conferences including:

• RSA Conference (San Francisco)
• OWASP Global AppSec (Boston)
• BSides (Harrisburg, Austin, Seattle, Baltimore)
• CypherCon (Milwaukee)

Security Domains:AI/ML SecurityCloud SecurityApplication SecurityThreat ModelingPenetration TestingVulnerability AssessmentMalware AnalysisIncident Response

Cloud Platforms:AWSAzureGCPOracle Cloud

Programming:PythonJavaSQLInfrastructure as Code

I'm always interested in collaborating on AI security challenges and advancing the security of agentic AI systems.

• 💼 LinkedIn
• 🌐 Personal Website
• 📝 Cisco Blog

"Defending Digital Frontiers - Securing AI systems at scale"