SMIT
RAMI
aka PwnK1d
Product Security and AI Security engineer focused on securing modern applications, LLM-powered products and agentic systems. I work across offensive security, threat modeling and security engineering to identify risks and help teams build secure products.
ABOUT ME
Security Engineer with experience in Application Security, Product Security, Threat Modeling, Secure SDLC, and Security Design Reviews. Currently contributing to the security of an AI-driven SaaS cybersecurity platform, supporting VAPT, DevSecOps initiatives, and security integration across engineering workflows.
Skilled in identifying design-level risks, translating technical vulnerabilities into business impact, and collaborating with development teams to build secure products. Interested in advancing toward Product Security Architecture and Secure-by-Design leadership roles.
EXPERIENCE
A reverse-chronological trace of engagements, from freelance consulting to leading AppSec for an AI-driven SaaS platform.
Senior Security Engineer
Be4Breach May 2026 - Present- Lead application security assessments (VAPT) across web and API environments, focusing on exploitability, business impact, and remediation prioritization.
- Drive security initiatives for QORE AI, an AI-driven SaaS cybersecurity platform, collaborating with product, engineering, and leadership stakeholders.
- Lead threat modeling exercises and design-level security reviews to identify architectural, business logic, and access control risks.
- Define and review security requirements for new features and product capabilities.
- Mentor and guide team members on application security practices, vulnerability assessment methodologies, and secure-by-design principles.
- Contribute to security strategy discussions, risk prioritization, and integration of security controls within engineering workflows.
- Support security considerations for AI/LLM-enabled features, identifying abuse cases and recommending mitigations.
Security Engineer
Be4Breach Jan 2026 - May 2026- Conducted application security assessments (VAPT) across web and API layers, focusing on real-world exploitability and business impact.
- Contributed to the security of an AI-driven SaaS cybersecurity platform (QORE AI), aligning security practices with product and engineering workflows.
- Supported Secure SDLC by integrating security practices into development processes and identifying risks in early stages.
- Assisted in threat modeling and design-level security reviews to identify architectural and business logic risks.
- Worked closely with development teams to define and implement secure coding practices and remediation strategies.
- Contributed to security considerations for AI/LLM-integrated features, identifying potential abuse scenarios and misuse risks.
- Bridged the gap between security findings and engineering implementation with actionable, context-driven recommendations.
Cybersecurity Consultant
CodeShip Pvt Ltd., Chennai Feb 2025 - Jan 2026- Conducted application security assessments aligned with OWASP Top 10, focusing on real-world exploitability and business impact.
- Performed threat modeling (STRIDE-based) and early-stage security design reviews to identify architectural and logic-level risks.
- Supported Secure SDLC initiatives by identifying security gaps during design and development phases and recommending preventive controls.
- Assisted in defining access control, authentication, and authorization requirements aligned with business and operational needs.
Cybersecurity Consultant
Freelancing Jan 2023 - Feb 2025- Conducted application security assessments aligned with OWASP Top 10 and business risk context.
- Performed threat modeling and security design reviews to identify design-level risks and recommend preventive controls.
- Defined access control and security requirements aligned with operational and business needs.
- Produced security assessment reports suitable for technical and management stakeholders.
- Supported multiple client engagements across different industries with varying security and compliance requirements.
SKILLS
Grouped by domain: from exploit-level AppSec to cloud identity, LLM abuse cases, and the languages behind the tooling.
AI / LLM Security
Application & Web Security
Security Design & Architecture
Threat Modeling & Risk
Cloud & Identity Security
Penetration Testing
DevSecOps & Product Security
OS & Environments
Languages & Databases
Communication & Mentoring
FOCUS
What's actually on my plate day to day: less about credentials, more about the work.
AI Red Teaming
Adversarial testing of LLM-powered products (prompt injection, jailbreaks, tool abuse and data-exfiltration paths) before attackers find them.
AI Security Engineering
Embedding security controls directly into AI and agentic pipelines: input validation, output handling, permission boundaries and abuse-resistant tool calling.
Product Security Architecture
Reviewing product and cloud designs for trust-boundary gaps, access-control flaws and architectural risk before a single line of code ships.
Secure Agentic SDLC
Building secure-by-design practices into agentic and AI feature development: threat modeling at design time, through to secure deployment.
CONTACT
Let's talk about
securing your product.
Available for AI Security assessments, Product Security consulting, security architecture reviews, and technical speaking engagements. I respond fastest over email.
Send an Email →