Manish Gupta

Cybersecurity professional with 10+ years of experience spanning AI Security, Cloud Security, Red Teaming, Adversary Simulation, and Security Research across enterprise, cloud-native, and AI-driven environments. Specialized in assessing and emulating advanced threats targeting AI systems, Large Language Models (LLMs), cloud infrastructure, SaaS platforms, and hybrid enterprise environments. Currently leading the development of advanced cyber range capabilities and delivering red and blue team training programs focused on cloud security, AI security, adversary emulation, and incident response.

Conduct AI red team assessments against generative AI applications, AI agents, LLM-powered systems, and AI infrastructure to identify vulnerabilities such as prompt injection, indirect prompt injection, jailbreaks, data leakage, tool abuse, agent manipulation, model evasion, and other emerging AI attack vectors.

Principal Consultant - Cyberwarfare Labs - Bangalore, India

(2023-03)

• Lead a team of security researchers in building a next-generation cyber range platform for realistic attack-and-defence simulations across enterprise, cloud, and AI environments.
• Conduct AI Red Team assessments against LLMs, Generative AI applications, AI agents, and RAG systems to identify vulnerabilities such as prompt injection, jailbreaks, data leakage, and agent abuse
• Research emerging attack techniques and develop advanced detection strategies targeting cloud infrastructure, AI systems, and agentic workflows.

Security Researcher - Microsoft R&D Pvt Ltd - Hyderabad, India

(2022-10 - 2023-02)

• Research and analyze threats targeting cloud platforms, IaaS, and SaaS service providers such as AWS, GCP, Azure, and Office 365.
• Discover and document novel cloud-based attack techniques; design and implement detection strategies to mitigate them.
• Build contextual attack graphs by correlating diverse cloud security data sources to map potential attack paths and vulnerabilities.

Sr. Offensive Security Engineer - Red Team - Grab Holdings Inc - Bangalore, India

(2021-09 - 2022-09)

• Lead red team engagements through planning, organizing, executing, and reporting.
• Perform red teaming engagements on hybrid multi-cloud environments which include Active Directory, AWS, Azure, GCP, 0365, Azure AD, Google Workspace & Other SaaS Solutions.
• Perform targeted, covert red team operations in various technology landscapes with custom tooling to aid infiltration, exploitation, and post-exploitation activities.
• Develop payloads, scripts, and tools that weaponize new concepts for execution, evasion, lateral movement, and persistence.

Security Engineer - II, Red Team (Offensive Security) - Citrix R&D India Pvt. Ltd. - Bangalore, India

(2019-11 - 2021-09)

• Plan and execute red team exercises across Citrix on-premise infrastructure, multi-cloud environments, and product
• Collaborate with Threat Intelligence and Security Operations Center team.
• Advisory attack simulation and TTPs analysis of different-2 APT groups
• Performed penetration testing on Web, Mobile, Network, Cloud and WIFI.

Cyber Security Analyst - Societe Generale Global Solutions Centre Pvt. Ltd. - Bangalore, India

(2018-05 - 2019-11)

• Plan and execute complex red-team exercise in banking & financial services domain
• Design and develop scripts, frameworks and TTPs required for facilitating and executing complex scenarios.
• Conduct vulnerability assessment & penetration testing on SG's applications & infrastructure
• Collaborate with threat research team to understand and mitigate new emerging threats across the organization.
• Collaborate with development teams for vulnerability remediation and secure coding.

Cyber Security Analyst - Tata Consultancy Services Limited (TCS) - Bhubaneswar, India

(2017-07 - 2018-04)

• Conduct vulnerability assessment & penetration testing on client's applications & infrastructure.
• Work with application developers to validate, assess, understand root cause and mitigate vulnerabilities.
• Perform security reviews of application designs and source code review.
• Collaborate with development teams for vulnerability remediation and secure coding.
• Performed penetration testing on Web, Mobile, Network, Cloud and WIFI.

M.Tech - Cyber Security - Reva University (2020-09 - 2022-06)

B.Tech - Computer Science and Engineering - University College of Engineering, Rajasthan Technical University (2013-05 - 2017-05)