Sharuk Khan

Security professional with 5+ years of experience in application security, penetration testing, and vulnerability management, with deep specialization in AI/LLM and agentic security. Skilled in adversarial testing of GenAI systems — prompt injection, jailbreaking, data poisoning — mapped to OWASP LLM Top 10 and MITRE ATLAS. Strong foundation in SAST, DAST, manual testing, and partnering with engineering teams to remediate real-world risk.

Security Analyst at Accenture (2021-05 – Present)

• Led adversarial testing of AI agents and Copilot deployments — prompt injection, jailbreak, and misuse simulations against OWASP LLM Top 10, producing audit-ready hardening reports.
• Conducted red-team research on Microsoft Copilot agents; built tailored threat alerts in Microsoft Defender for continuous detection of agent abuse and anomalous behavior.
• Built and secured AI-powered agents using Copilot Studio and Power Automate with secure-by-design practices: least-privilege access, safe prompt handling, and controlled output behavior.
• Performed hands-on penetration testing identifying business-logic flaws, broken access controls, XSS, SQL Injection, CSRF, and IDOR across web applications and APIs.
• Led SAST engagements using Veracode and end-to-end DAST assessments using Fortify WebInspect, OWASP ZAP, Burp Suite, and Invicti — from discovery through remediation sign-off.
• Implemented governance via Microsoft Purview for audit logging, DLP, and AI security alerting; built Power BI dashboards for client reporting and leadership visibility.

B.Tech in Mechanical Engineering – Vellore Institute of Technology (VIT) (2015 – 2019)