Sachin P.

About Sachin P.

The era of \'Chatbot Security\' is over. We are now entering the era of the Digital Employee.I am a Cybersecurity Architect who bridges the gap between traditional Enterprise Risk and the chaotic reality of Agentic AI. While many focus on prompt injection, I focus on the structural risks: Runtime Governance, Non-Human Identity (NHI) Sprawl, and Data Security Posture Management (DSPM).My focus is enabling organizations to adopt Generative AI safely at scale, moving beyond \'blocking\' to \'architecting\' the guardrails.Core Expertise:AI Security Architecture: Zero Trust frameworks for RAG pipelines and Agentic workflows.Governance: Operationalizing NIST AI RMF and ISO 42001 for regulated industries (FinTech).Cloud Security: Securing the data lakes (AWS/Azure) that feed the models.I don\'t just secure the model; I secure the entire cognitive architecture#AISecurity #Cybersecurity #CISO #GenAI #RiskManagement #LLMSecurity #AgenticAI #MLSecOps #MLSecOps #TrustworthyAI #SecureByDesign

Experience

1. Product Security Architect

   Capital One

   Dec 2023 — Present · San Francisco, CA, US

   Agentic AI Security Strategy: Architected security frameworks for autonomous AI agents, focusing on threat modeling \"Agentic\" loops to prevent unauthorized tool execution and escalation of privileges.Designed the Non-Human Identity (NHI) governance framework, securing thousands of automated workload identities—a critical precursor for governing autonomous AI Agents and reducing the blast radius of Agentic tools.AI Infrastructure & Governance: Partnered with engineering to perform advanced threat modeling for LLM-based systems, successfully mitigating risks such as prompt injection, sensitive data disclosure, and autonomous system manipulation.Strategic Advisory for AI Deployment: Acted as the lead security advisor for the LAUNCH team, integrating secure-by-design principles into the lifecycle of AI-driven products from initial design through North American regional deployment.Enterprise Migration Leadership: Served as Lead Threat Assessor for strategic migrations to GitHub Enterprise Cloud, ensuring that automated security controls and AI-assisted coding tools aligned with NIST 800-53 and ISO 27001 standards.Standardized API security protocols (OIDC/OAuth) for internal microservices, creating a secure \'Tool Use\' layer that allows future Generative AI agents to interact with banking systems without bypassing business logic.

Education

• Charles Sturt University

  Digital Forensics

  2015 — 2015

• De Anza College

  Ethical Hacking

  2015 — 2015

• Charles Sturt University

  CyberSecurity Management

  2015 — 2015

Skills

• IT Operations
• Cloud Computing
• Vendor Management
• IT Strategy
• Disaster Recovery
• Vmware Esx
• Vmware
• Server Architecture
• Storage
• Cluster
• IT Service Management
• Project Management
• Outsourcing
• Infrastructure
• Incident Management
• Service Delivery
• High Availability
• Software Development Life Cycle (Sdlc)
• Business Process
• Dns
• Integration
• Hyper-V
• Virtualization
• Security
• Enterprise Software
• Enterprise Architecture
• Troubleshooting
• Storage Area Networks
• Information Technology
• Network Design
• Data Center
• Networking
• Hp
• Active Directory
• Unix
• Microsoft Sql Server
• Windows Server
• Solaris
• Hardware
• Network Security