Who is Chanchal Verma?

Chanchal Verma is an AI Security Engineer based in Abu Dhabi, UAE, and a Senior Full Stack Engineer with over 5 years of experience building cloud-native systems. He currently leads frontend development for AI-powered security products at CPX and builds agentic AI systems that detect and respond to cyber threats automatically.

What does Chanchal Verma do?

He designs and builds AI-native security software end to end: data-rich interfaces for SOC, Threat Intelligence, and Threat Hunting teams; backend platforms in Go and Node.js; and autonomous LLM agents for anomaly detection and proactive defence against malware and phishing.

What technologies does Chanchal Verma work with?

React, Next.js and TypeScript on the frontend; Go, Node.js, NestJS, GraphQL and gRPC on the backend; Agentic AI, LLM integration, RAG, Qdrant and Ollama for AI systems; and AWS, Azure, GCP, Kubernetes, Terraform and Keycloak across cloud and security.

Where is Chanchal Verma based?

Abu Dhabi, United Arab Emirates. He has worked with teams across the UAE, Germany, India, and the United States.

How can I contact or hire Chanchal Verma?

Email chanchal9.dev@gmail.com or reach out on LinkedIn at https://linkedin.com/in/chanchalvdev/. He is open to senior engineering, AI security, and agentic AI product roles as well as consulting engagements.

Open For WorkAbu Dhabi, UAERelocation — Worldwide

Chanchal
Verma

Senior Full Stack Engineer at CPX with 5+ years building cloud-native solutions — currently leading frontend for AI-powered security systems that detect and respond to cyber threats automatically, and building agentic AI systems that think and adapt on their own.

Open component specs ▸Contact — email

years experience

20+

systems shipped

countries worked with

200+

developers mentored

Sheet 02 / Design Notes

General Notes

“My best work happens at the intersection of AI and cloud systems — interfaces that stay calm under pressure, platforms that stay reliable, and agents that decide faster than we can.”

Secure by design

Identity, permissions, auditability, and safe defaults built into the architecture early — not bolted on as a final checklist.

AI-native engineering

From LLM-powered threat classification to autonomous agents — AI is the load-bearing engine, not decoration.

Product clarity

Complex systems earn their keep only when flows, states, and hierarchy make decisions easier for the person reading them.

Sheet 03 / Assembly Timeline

Career axis

From mentoring MERN developers in Bengaluru to AI-driven cybersecurity in Abu Dhabi — each role compounding toward intelligent, secure systems.

Aug 2025 — Present

Senior Full Stack Engineer

CPX

Abu Dhabi, UAE

Building AI-driven cybersecurity solutions — intelligent agents across frontend and backend that detect and respond to threats in real time.

Apr 2025 — Aug 2025

Technical Lead(Golang)

HCL Technologies

Bengaluru, India

Golang technical lead for the PCRE and PRD modules — owning Go service design, API contracts, and delivery through to production release.

Jul 2024 — Mar 2025

Founding Software Engineer

StackGuardian

Germany — Remote

One of the first engineers building an infrastructure governance platform from absolute scratch.

Jun 2023 — Jun 2024

Senior Full Stack Engineer

Thor Solutions

Remote, India

Led backend and cloud delivery for production applications across two client engagements using Go, MERN, AWS, and CI/CD automation.

Oct 2021 — Jun 2023

Software Engineer

Masai School

Bengaluru / Remote

Built internal learning platforms in React and Node.js while mentoring 200+ students into MERN developers.

Education

Shri G S Institute of Technology & Science

B.E. — Information Technology · 2016 — 2020

Languages

English (Professional) · Hindi (Native) · Arabic (Beginner)

Sheet 04 / Component Specs

Exploded view — work

Each case study is framed by the user pressure, the system decision, and the product result it made possible.

Go SIEM Agent — LLM Classifier

In serviceSecurity · 2025

An AI-native SIEM agent written in Go that classifies any raw log line into a structured threat report — with MITRE ATT&CK mapping, IOC extraction, severity triage, and actionable remediation — in under 20 seconds, using a local-first LLM stack.

Materials

Go · React · Qdrant · Ollama · PostgreSQL · Docker · Prometheus

Performance

<20s per classification

40+ MITRE techniques

~3k lines Go

Notes

Turns hours of manual SOC triage into a sub-20-second automated pipeline, reducing analyst time spent on alert noise by eliminating rule-writing and manual MITRE mapping.

Open case file View source

ThreatRAG — Agentic Threat Intelligence RAG

In serviceSecurity · 2026

A spec-first, security-hardened RAG platform that answers analyst questions with cited sources from MITRE ATT&CK, OWASP, and NVD — then runs autonomous multi-agent investigations on any IOC end-to-end.

Materials

Python · FastAPI · LangChain · LangGraph · React · Qdrant · Ollama

Performance

<2s cited answer (TTFT)

39/39 tests passing

3 agent pipeline

Notes

Collapses hours of manual searching across MITRE ATT&CK, NVD, and OWASP into sub-two-second cited answers, and turns end-to-end IOC investigation into an autonomous Researcher→Critic→Reporter pipeline.

Open case file View source

File Ingestion Platform — Archive Parsing & IOC Extraction

In serviceSecurity · 2026

A local-first ingestion platform that takes a 10 GB password-protected archive, recursively unpacks it, detects and parses every member format, extracts ten classes of indicator from each record, and streams the results into PostgreSQL and OpenSearch — with live progress in a React dashboard.

Materials

Go · Python · React · PostgreSQL · Redis · MinIO · OpenSearch

Performance

10 GB single-file ingest

10 IOC classes/record

32 worker tests passing

Notes

Turns an opaque evidence blob into searchable, indicator-tagged records without the API ever touching the data path — and keeps 49,999 good extractions when one member of 50,000 is corrupt.

Open case file View source

Production API Delivery System

RestrictedBackend · 2024

A production backend and delivery system with authentication, payments, notifications, cloud storage, observability, and CI/CD.

Materials

Go · Gin · PostgreSQL · AWS · Docker · GitHub Actions

Performance

CI/CD release flow

AWS infrastructure

Go service layer

Notes

Improved release speed and reliability by making cloud delivery predictable and repeatable.

Drawing sealed — NDA

Developer Evaluation Platform

RestrictedFrontend · 2023

Internal learning and evaluation tools for developer education, mentoring, code review, and automated feedback workflows.

Materials

Node.js · React · MongoDB · Express · Testing · Mentoring

Performance

200+ developers

MERN core stack

QA reviews

Notes

Supported developer growth at scale through structured evaluation and clearer feedback loops.

Drawing sealed — NDA

Sheet 05 / Bill of Materials

Stack manifest

No.	Description	Spec	Parts
01	Frontend & UI/UX	Interfaces, state, data loading, design systems, and product surfaces.	React · Next.js · TypeScript · TanStack Query · Redux · Tailwind CSS · Vite · Figma
02	Backend Platforms	APIs, service boundaries, auth, integrations, and data workflows.	Go · Node.js · NestJS · Express · Gin · Fiber · GraphQL · gRPC
03	AI & Agentic Systems	LLM pipelines, autonomous agents, embeddings, and AI-native product features.	Agentic AI · LLM Integration · Ollama · Qdrant · RAG · Prompt Engineering · Anomaly Detection
04	Cloud & Security	Deployment, governance, identity, secure access, and operational reliability.	AWS · Azure · GCP · Docker · Kubernetes · Terraform · Keycloak · CI/CD
05	Data & Operations	Persistence, caching, queues, audits, and system observability.	PostgreSQL · MongoDB · Redis · DynamoDB · Kafka · Prisma · Prometheus · Temporal

ChanchalVerma

General Notes

Secure by design

AI-native engineering

Product clarity

Career axis

Senior Full Stack Engineer

Technical Lead(Golang)

Founding Software Engineer

Senior Full Stack Engineer

Software Engineer

Exploded view — work

Go SIEM Agent — LLM Classifier

ThreatRAG — Agentic Threat Intelligence RAG

File Ingestion Platform — Archive Parsing & IOC Extraction

Production API Delivery System

Developer Evaluation Platform

Stack manifest

Chanchal
Verma