I make web traffic tell the truth.
Senior security engineer at Decentro: WAF and detection engineering, API security, AI-augmented defence

I'm a senior security engineer at Decentro, where I secure the infrastructure behind financial APIs: zero-trust VPN access with OpenVPN and Google SSO, a re-architected SOC on Wazuh, automated vulnerability and CIS compliance management, and honeypots that catch attackers early.
Before Decentro I spent three years at PhonePe, a fintech platform serving 500M+ users. I shipped an in-house WAF on Pingora and Coraza, cut malicious traffic by 45%, built a 500-rule detection layer on the Elastic Stack, and designed Barbican, an AI platform that cut alert investigation time by about 60%.
Earlier, I spent two years as a vulnerability researcher at Loginsoft, finding 70+ critical vulnerabilities in Cisco, Juniper and McAfee products through Java source review and binary analysis, and I co-founded a small security company that hardened servers for SMBs and trained 200+ people for CEH, Security+ and CCNA.
What I work with
- WAF and edge: Cloudflare, Akamai, F5 ASM/AFM, Signal Sciences, Pingora, Coraza, ModSecurity, Nginx Ingress, DDoS defence
- Detection and SIEM: Elastic Stack, OpenSearch, Wazuh, QRadar, Suricata, Sigma, YARA, MITRE ATT&CK, honeypots
- Access and zero trust: OpenVPN with Google SSO, mTLS, API gateway hardening
- TLS and protocols: JA3, JA4 and JA4H fingerprinting, mTLS, TCP/IP, BGP
- AI-augmented security: MCP servers, LLM-assisted triage, sentence-transformer embeddings, FAISS similarity search, RAG
- Offensive security: VAPT, Burp Suite Pro, OWASP ZAP, Metasploit, Java source review, CVE research
- Engineering: Python, Go, FastAPI, Django, Terraform, Ansible, OPA policy-as-code, Docker
- Compliance: NIST, ISO 27001, PCI-DSS, SOC 1/SOC 2, CIS Benchmarks
Certifications
- CISSP (in progress, target Q3 2026)
- AWS Certified Security Specialty (in progress, target Q4 2026)
- EC-Council Certified Ethical Hacker (CEH)
- ICSI Certified Network & Security Specialist (CNSS)
- Practical Malware Analysis and Windows Privilege Escalation, TCM Security
- Cisco Cybersecurity Essentials
Education
B.Tech in Electronics and Communication Engineering, GITA, Bhubaneswar (2016 to 2020)
Career
Lead / Senior Security Engineer (Sole InfoSec Lead), Decentro
to present
Sole owner of the Information Security program for a fintech API platform serving banking partners and enterprise clients.
Senior Infosec Engineer, PhonePe
to
Protected 500M+ user transactions across PhonePe's distributed fintech platform.
Infosec Engineer, PhonePe
to
Security Researcher, Loginsoft
to
Enterprise vulnerability research for Cisco, Juniper, McAfee and other Tier-1 vendors.
Co-Founder & Security Analyst, Mitigater TechSecure
to
Professional Trainer, Golars Networks
to
Advanced cybersecurity, networking and cloud training in Hyderabad.