Security-focused engineer building software and cloud-native infrastructure — I build products end to end, then test them the way an attacker would.
I build full-stack products, test them the way an attacker would, and ship them on modern cloud-native infrastructure. Currently an Engineering Intern at CoinDCX working with Kubernetes, Argo CD, and GitOps — previously at Kroll on infrastructure and networking.
A few projects I designed and shipped. Each started as a real problem — so I owned them from data model to deployed UI.
Multi-modal plagiarism detection for educators
A full-stack platform and Chrome extension that checks text, code and images for plagiarism in real time, then returns a readable similarity report.
What I built — Designed the LangGraph + RAG pipeline, the Postgres schema and the Manifest V3 extension, and added prompt-injection guardrails around the AI calls.
AI storytelling + an artisan marketplace
A PWA pairing interactive AI storytelling with seller tools for artisans — chat, visual search, and AI-assisted product descriptions.
Grouped by how I actually use them — not a wall of logos. Strongest in full-stack product work and application security.
Internships
infra · web · security
Hackathon wins
1st place, 100+ teams
Certifications
cloud · security · AI
Finding and reasoning about how systems break.
Owning features from schema to deployed UI.
Building and securing LLM-powered features.
APIs, data models, and the auth around them.
Comfortable across the stack and the terminal.
Shipping, operating, and continuously delivering what I build.
Four internships spanning cloud-native DevOps, infrastructure, secure web development, and security research.
Engineering Intern
Working on cloud-native engineering and deployment workflows across Kubernetes-based infrastructure.
Technology Intern — Infrastructure & Networking
Supported enterprise infrastructure and networking operations across cloud and on-prem environments.
Web Developer Intern
Built and shipped full-stack web applications with a focus on secure, reliable delivery.
Cybersecurity Research Intern
Hands-on security research across traditional web targets and LLM-based systems.
How I approach security testing — a structured, repeatable workflow that prioritises thoroughness and responsible disclosure.
I don’t treat security as a separate hat. The same curiosity that makes me want to understand how a system works makes me want to know how it fails — and building with that in mind is what keeps the things I ship from quietly breaking later.
Before I trust a feature, I ask how it gets abused — bad input, broken access control, a token that outlives its purpose. Mapping the failure modes early is cheaper than patching them after launch.
User data, third-party APIs, even content scraped from a web page — none of it is trusted until it’s validated. That habit came directly from building AI features where prompt injection is a real threat.
Bug bounty work is mostly patient enumeration: what’s exposed, what assumptions the app makes, where the edges are. I automate the repetitive parts so I can spend attention on the interesting ones.
Auth, least privilege, and sane defaults belong in the first version, not a later hardening pass. Designing them in keeps the product simpler and the surface smaller.
I’m a recent IT graduate who likes shipping things that actually work — and then figuring out how they break. Most of my projects start as a real problem I wanted solved, so I tend to own them from data model to deployed UI.
Security is what pulls me deepest. I’m drawn to understanding how systems fail — auth flows, APIs, access control, infrastructure — because knowing the failure modes makes me build sturdier products. I practise this through bug bounty methodology, recon automation, and the OWASP Top 10.
Now I’m building on that foundation at CoinDCX, working with Kubernetes, Argo CD, and GitOps to ship cloud-native services. What I bring is range, fast learning, and a habit of caring about the unglamorous parts: reliability, clear code, and security that’s designed in rather than bolted on.
Nadipena Varunkumar
Security-focused engineer building software and cloud-native infrastructure
Hyderabad, India
B.Tech, Information Technology
AITAM, Andhra Pradesh · 2022 – 2026 · CGPA 7.78 / 10
Squash the red bugs, skip the teal decoys. 20 seconds on the clock.
Ready to hunt?
Red bugs are worth +1. Teal decoys are −2. Tip: turn on sound in the nav for the full effect.
Packet Run
You’re a data packet racing through the network. Jump the red threats, grab the tokens. It only gets faster.
Space / tap to jump · hold for a higher jump
I’m looking for internships, new-grad roles, and security-minded engineering work. If you’re hiring or want to collaborate, the fastest way to reach me is email — I reply quickly.