# Aarsh Chaurasia

> Aarsh Chaurasia, Security Engineer and AI Security Researcher. Founding Security Engineer Intern at Vaatun, previously Security Assurance Intern at Microsoft (Azure DevSec) and Product Security at we45. Founder of Okynus Tech, incubated at C3iHub, IIT Kanpur.

## About

I work where AI meets real attack surface: finding how intelligent systems fail, and building what keeps them safe.

Today that’s at Vaatun. Before it came Microsoft and we45, and Okynus Tech, a security company I founded out of IIT Kanpur’s C3iHub and took to a ~$500K valuation.

- **University:** National Forensic Sciences University · CGPA 9.30/10
- **Programme:** B.Tech-M.Tech · CS (Cyber Security), 2022–2027
- **Currently:** Founding Security Engineer Intern · Vaatun
- **Previously:** Microsoft · we45 · Okynus Tech (Founder)

## Experience

- **Founding Security Engineer Intern**, Vaatun (Aug 2026 – Present)
- **Security Assurance Intern**, Microsoft (May 2026 – Jul 2026)
- **Product Security Intern**, we45 (Jul 2025 – Mar 2026)
- **Founder**, Okynus Tech (Apr 2024 – Jun 2025)
- **Security Engineer Intern**, SecureDApp (May 2025 – Jul 2025)
- **Backend Security & Development Intern**, Login2Xplore (Sep 2024 – Apr 2025)
- **Data Security Analyst Intern**, CM Office Gujarat (Nov 2024 – Dec 2024)
- **Summer Research Intern**, Florida International University (Jun 2024 – Sep 2024)
- **CTO / Technical Co-founder**, Stealth Startup (Acquired) (Feb 2022 – Apr 2025)
- **Lead**, Google Developer Student Clubs (GDSC) (Jun 2023 – Jun 2024)

## Projects

- **EngineerSec**: AI native platform that automates threat modeling, vulnerability discovery, remediation and CI/CD security. It turns architecture and code context into prioritized, exploitable findings and drives fixes straight through the pipeline.
- **Intelligent Storage Evidence Analyzer**: Agentic AI powered forensic system that detects intentional disk wiping and identifies the tools used in data destruction. It analyzes disk images using entropy detection tool fingerprinting and behavioral intent modeling to support digital forensic investigations.
- **PayloadScope**: Machine learning system that classifies malicious web exploitation payloads such as XSS SQL Injection SSTI and Command Injection using TF IDF character n gram vectorization with a Logistic Regression multi class classifier. The system normalizes encoded inputs before analysis and supports both a REST API for automated pipelines and a GUI for manual payload inspection.
- **PhishSOC-AI**: PhishSOC-AI is an advanced, AI driven phishing detection platform designed for Security Operations Centers (SOC). It automates phishing email analysis through multi layered inspection, combining NLP-based sentiment classification, threat intelligence enrichment, screenshot forensics, and real-time Splunk integration
- **SecuriForge**: SecuriForge is a unified binary security and risk analysis framework that combines hardening checks, reverse engineering risk assessment, malware tampering detection, and SBOM generation into a single tool.

## Research

- **Navigating the Frontiers of Encryption in Mobile Forensics** (Florida International University Journal, 2023): This paper explores advanced approaches to overcoming encryption challenges in mobile device forensics by leveraging AI algorithms alongside cloud computing resources.
- **Towards Behavioural Secure Authentication Using Keystroke Dynamics** (Upcoming, 2025): Presents a keystroke dynamics-based authentication framework using ensemble classifiers (SVM, KNN, Random Forest), emphasizing accuracy improvements and dynamic thresholding to reduce false rejections.
- **Complex Resource Allocation and Energy Consumption in 5G and Modern Wireless Networks** (Upcoming, 2025): Investigates the complexities of resource allocation in 5G and beyond networks, highlighting causes of higher energy consumption and proposing potential optimization strategies.

## Achievements

- **3rd Place, Hack IIT Kanpur 2024** (IIT Kanpur, 2024)
- **AIR 3, NFAT 2022** (National Entrance Examination, 2022)
- **Global Top 1%** (TryHackMe, Ongoing)
- **Best Innovation Prize** (Hack IIT Kanpur, 2024)
- **Founder Fellow, C3iHub** (C3iHub, IIT Kanpur, 2024)
- **Research Fellow** (Florida International University, USA, 2024)

## Skills

- **Offensive Security:** Application Security, Web and API Security, Vulnerability Assessment and Penetration Testing (VAPT), Threat Modeling, Bug Bounty Triage, Secure Coding, OWASP Top 10, Burp Suite, OWASP ZAP, Nessus, Nmap
- **AI Security & AI for Security:** AI Security, AI for Security, Agentic AI Security, AI Security Testing, MCP Security, AI Threat Modeling, AI Red Teaming, LLM Security, Agent Evaluations, Agent Orchestration, DevSecOps, CI/CD Security, Security Automation
- **Cloud & Infrastructure:** AWS, Azure, Docker, Kubernetes, CI/CD, Cloud Security, Infrastructure Security, Cloud Automation
- **Observability & Incident Response:** SIEM, SOAR, Splunk, ELK Stack, Alert Triage, Detection Engineering, Incident Response
- **Programming & Automation:** Python, Bash, JavaScript, REST APIs, YAML, Security Automation, Scripted Testing, API Fuzzing
- **Fundamentals:** Operating Systems, Artificial Intelligence & Machine Learning (AI/ML), Data Structures & Algorithms (DSA)

## Writing

- [Building PhishSOC and Winning at HackIITK 2025 Experience](https://aarshx05.medium.com/building-phishsoc-and-winning-at-hackiitk-2025-experience-15e9c1cc708c) (Jun 16, 2025)
- [The Automation Paradox: How Security Tools Create New Vulnerabilities](https://aarshx05.medium.com/the-automation-paradox-how-security-tools-create-new-vulnerabilities-b75a62f14103) (Jan 23, 2026)
- [Shift Left Is Dead — Shift Smart: What Enterprises Should Actually Do](https://aarshx05.medium.com/shift-left-is-dead-shift-smart-what-enterprises-should-actually-do-eab9a5287662) (Jan 16, 2026)
- [Will Your Encryption Survive the Quantum Leap?](https://www.we45.com/post/will-your-encryption-survive-the-quantum-leap) (Sep 18, 2025)

## Links

- Website: https://aarshc.me/
- Email: aarsh.chaurasia05@gmail.com
- LinkedIn: https://www.linkedin.com/in/aarshx05/
- GitHub: https://github.com/aarshx05
- Medium: https://aarshx05.medium.com/
- we45 Blogs: https://www.we45.com/contributors/aarsh-chaurasia
- TryHackMe: https://tryhackme.com/p/anonymouscipher