Nayan Goel

About Nayan Goel

Principal Application Security Engineer specializing in AI security, threat modeling, and large-scale cloud protection, with a mission to make intelligent systems safer for the world. Over the past 7+ years, I’ve designed and secured complex platforms powering fintech, healthcare, and enterprise cloud ecosystems working at the intersection where modern AI meets real-world security risk.My work spans LLM agents, GraphQL architectures, secure RAG pipelines, cloud-native systems, and Zero-Trust AI frameworks. I focus on building security in not bolting it on through architecture reviews, penetration testing, AI-specific controls, and secure SDLC integration.I am also an inventor, researcher, and open-source contributor.My portfolio includes: 3 Patents in AI-driven authentication, machine learning security devices, and secure cloud-based architectures Published research on GraphQL API security, Zero-Trust AI systems, and dynamic threat modeling for continually learning AI models Security tools used globally including the GraphQL Security Tester (Burp extension) and Automated AI Prompt Injection TesterI contribute to global security standards through: OWASP Agentic Security Guidelines v1.0 OWASP AIVSS Project OWASP LLM Top 10Across the industry, I am recognized for pioneering AI threat modeling and helping define how organizations secure LLMs, autonomous agents, and AI-first architectures. I\'ve spoken at BSides Chicago, IEMCON UC Berkeley, Global Data & AI Conference, DevFest AI, and other international forums.Beyond engineering, I serve as an editor and reviewer for scientific journals and a session chair for conferences, where I evaluate emerging research in AI security, cloud computing, and distributed systems.

Experience

1. Principal Application Security Engineer

   Upgrade, Inc.

   Feb 2024 — Present · San Francisco, CA, US

Education

• San José State University

  Master’s Degree, Computer Software Engineering

  2016 — 2018

• RVCE

  Bachelor of Engineering (B.E.), Computer Science

  2012 — 2016

Skills

• Redis
• Microsoft Word
• Php
• Java
• Node.js
• Mysql
• Mysql Cluster
• Penetration Testing
• Node
• Amazon S3
• React.js
• C++
• Javascript
• Ios Development
• Jdo
• C#
• Amazon Web Services (Aws)
• Network Administration
• Microsoft Excel
• Powerpoint
• Objective-C
• Amazon Rds
• C
• Programming
• Mobile Application Development
• Information Security
• Mongodb
• Web Programming
• Ionic Framework
• Apache Cordova
• Json
• Css
• Python Flask
• Html Scripting
• Html
• Microsoft Office
• Python
• React Js
• Amazon Ec2
• Mean Stack