Skip to content
CV
Shipping

Chanchal Verma · AI Engineer · Forward Deployed Engineer · AI Security Engineer I build AI agents that ship — and keep them safe.

Building agentic AI at CPX. I embed with teams, turn messy real-world problems into production agentic systems, and build security in from day one.

Open to work · relocation worldwideRoles: AI Engineer, Forward Deployed Engineer, Agentic AI Builder, AI Security Engineer

Ask my AI

Curious? Ask my AI anything about me.

FlagshipSecurity · 2026

Casewright

Local-first AI Security Analyst

An open-source, local-first AI security analyst in Go that takes alerts from Wazuh, Elastic or Security Onion from alert to resolved case — grouping related alerts into one case per attack, investigating it with a local or hosted LLM, and proposing a response a person approves.

severity triage
P1–P5
severity triage
ATT&CK mapping
MITRE
ATT&CK mapping
Docker demo
1 cmd
Docker demo

Go · React · Sigma · Gemini · Ollama · Qdrant · PostgreSQL · Docker

How I work

Embed. Build. Ship.

  1. 01

    Sit with the customer, find the real problem

  2. 02

    Prototype agents in days, not quarters

  3. 03

    Harden, secure & run in production

MS in Artificial Intelligence

University of Colorado Boulder · Oct 2026 — Present

Experience

6+ yrs

worked across

  • UAE
  • Germany
  • India
  • US

Work

More things I've built

All projects

Security · 2026

ThreatRAG

A spec-first, security-hardened RAG platform that answers analyst questions with cited sources from MITRE ATT&CK, OWASP, and NVD — then runs autonomous multi-agent investigations on any IOC end-to-end.

cited answer (TTFT)
<2s
cited answer (TTFT)
tests passing
39/39
tests passing
agent pipeline
3
agent pipeline

Python · FastAPI · LangChain · LangGraph · React · Qdrant · Ollama

Security · 2026

Enterprise File Ingestion Platform

A local-first ingestion platform that takes a 10 GB password-protected archive, recursively unpacks it, detects and parses every member format, extracts ten classes of indicator from each record, and streams the results into PostgreSQL and OpenSearch — with live progress in a React dashboard.

single-file ingest
10 GB
single-file ingest
IOC classes/record
10
IOC classes/record
worker tests passing
32
worker tests passing

Go · Python · React · PostgreSQL · Redis · MinIO · OpenSearch

AI · 2026

AgentOps AI

A production-minded RAG platform that runs entirely on local models: multi-tenant document ingestion, hybrid retrieval, and grounded answers with validated citations. The foundation is built; the agent harness on top of it is in progress.

tests passing
107
tests passing
vector + keyword search
Hybrid
vector + keyword search
local model cost
$0
local model cost

Python · FastAPI · PostgreSQL · pgvector · Ollama · Docker · GitHub Actions

Backend · 2024

NDA

Production API Delivery System

A production backend and delivery system with authentication, payments, notifications, cloud storage, observability, and CI/CD.

release flow
CI/CD
release flow
infrastructure
AWS
infrastructure
service layer
Go
service layer

Go · Gin · PostgreSQL · AWS · Docker · GitHub Actions

Client work — details on request

Frontend · 2023

NDA

Developer Evaluation Platform

Internal learning and evaluation tools for developer education, mentoring, code review, and automated feedback workflows.

developers
200+
developers
core stack
MERN
core stack
reviews
QA
reviews

Node.js · React · MongoDB · Express · Testing · Mentoring

Client work — details on request

Journey

Where I've shipped

From mentoring 200+ developers in Bengaluru to building AI products in Abu Dhabi — every role closer to the people using what I build.

  1. Aug 2025 — Present

    Senior Full Stack Engineer (AI Engineering)

    NOW

    CPXAbu Dhabi, UAE

    Building a multi-tenant, multi-agent AI platform for threat intelligence and incident response teams, working directly with senior analysts and securing every agent with scoped tools, guardrails, and human review.

  2. Apr 2025 — Aug 2025

    Technical Lead

    HCL Technologies (client: HP Inc.)Bengaluru, India

    Client-facing technical lead for HP Inc., leading a distributed team building Go microservices on Kubernetes across time zones.

  3. Jul 2024 — Mar 2025

    Founding Software Engineer

    StackGuardianGermany — Remote

    Founding engineer on a multi-tenant cloud security and governance platform, built from zero alongside the CTO without a formal product spec.

  4. Jan 2023 — Jun 2024

    Full Stack Developer & DevOps Engineer

    Thor SolutionsRemote, India

    Led backend and cloud delivery for client products in Go and PostgreSQL, including one for a US-based client.

  5. Oct 2021 — Jan 2023

    Associate Software Engineer (Instructional)

    Masai SchoolRemote, India

    Mentored around 200 developers in full stack MERN and Python, and built backend modules for the assessment and coding-evaluation platforms.

  6. Jul 2020 — Oct 2021

    Full Stack Developer

    Smashing InfolabsIndore, India

    Built SaaS products, admin dashboards, and internal business tools on the MERN stack with SQL databases.

In my words

The best requirements are never in the spec. I sit with the people doing the work, watch where their day breaks down, and turn vague asks into a working prototype in days. Then I stay through rollout, iterating with every stakeholder and hardening the system with guardrails, human review, and audit trails, until it's something they trust and use every day.

Education

  • M.S. in Artificial Intelligence

    University of Colorado Boulder · Oct 2026 — Present

  • B.E. in Information Technology

    Shri G S Institute of Technology & Science · 2016 — 2020

Languages

  • English (Professional)
  • Hindi (Native)
  • Arabic (Basic, learning)

Stack

What I build with

AI & Agentic Systems

Agent frameworks, RAG, evaluation, observability, and open-weight model serving.

  • Agno
  • Pydantic AI
  • LangChain
  • LangGraph
  • Langfuse
  • RAG
  • AI Evals
  • Observability
  • Inferencing
  • MCP
  • Qdrant
  • MiniMax-M3
  • GPT-OSS-120B

Frontend & UI/UX

Interfaces, state, data loading, design systems, and product surfaces.

  • React
  • Next.js
  • TypeScript
  • TanStack Query
  • Redux
  • Tailwind CSS
  • Vite
  • Figma

Backend Platforms

APIs, service boundaries, auth, integrations, and data workflows.

  • Python
  • FastAPI
  • Django
  • Go
  • Gin
  • Node.js
  • NestJS
  • gRPC

AI Security

Securing agents and LLM apps against the OWASP Top 10 for LLMs.

  • Prompt Injection
  • OWASP LLM Top 10
  • Guardrails
  • Output Validation
  • Tool & Credential Scoping
  • Human-in-the-Loop
  • Data Leakage
  • Threat Modeling

Cloud & Security

Deployment, identity, secrets, zero trust, and air-gapped infrastructure.

  • Azure (AKS)
  • AWS
  • GCP
  • Kubernetes
  • Docker
  • Terraform
  • Argo CD
  • Keycloak / SAML
  • HashiCorp Vault
  • Zero Trust
  • Air-gapped / H100
  • SAST & Scanning

Data & Operations

Persistence, messaging, durable workflows, and system observability.

  • PostgreSQL
  • DuckDB
  • Redis
  • MongoDB
  • Kafka
  • RabbitMQ
  • Temporal
  • OpenTelemetry
  • Grafana
  • Prometheus
  • Splunk