Open to opportunities

Nilesh Kumar

@nileshevrywhr

Message

I build offensive, defensive, and AI security products that detect real-world threats.

India

Message

What I'm looking for

I'm looking to build and secure high-impact products where offensive security, detection engineering, cloud security, and AI security can turn real threat intelligence into practical outcomes.

At Banana Labs, I built Llama Leaks, tracking exposed Ollama servers across 50+ countries, and Signal Canary, a threat-intelligence reporting tool generating roughly 50 reports each week.

At Diebold Nixdorf, I automate OSINT-driven ATM threat analysis, led CSPM integration across 8 cloud accounts and 1,500 assets, and onboarded 37 teams across 78 projects. My work spans VAPT, adversary simulation, detection engineering, secure SDLC auditing, and AI security controls.

I also bring fraud-risk analysis, enterprise application engineering, external attack-surface management, and independent security research experience. I like breaking systems, understanding how attacks work, and building practical tools that help teams respond faster.

Experience

Work history, roles, and key accomplishments

Current

Founder & Lead Security Researcher

Current

Banana Labs

Jun 2025 - Present (1 year 2 months)

Built Llama Leaks, a tracker for exposed 85000+ Ollama servers, and Signal Canary, a threat intelligence tool with 10+ MAU. Trained a backdoored Qwen2.5-7B variant with 95% attack success rate.

OSINT GenAI Threat Intelligence LLM Security Prompt Injection Python Kaggle OWASP LLM Top 10

Current

Security Specialist

Current

Diebold Nixdorf

Feb 2021 - Present (5 years 6 months)

Automated OSINT data collection using GenAI to identify ATM attack trends. Led CSPM integration across 8 cloud accounts and onboarded 37 teams, managing SDLC security auditing.

OSINT GenAI Cloud Security CSPM Threat Modeling Vulnerability Assessment SDLC Risk Assessment

Senior Fraud Analyst

Infosys Ltd

Mar 2020 - Feb 2021 (11 months)

Simulated adversarial attack scenarios and fraud pathways to surface critical vulnerabilities and quantify business/financial risk. Collaborated cross-functionally across distributed teams to cut remediation time by 30%.

Fraud Analysis Threat Modeling Security Assessments Risk Quantification Cross Functional Collaboration

Systems Engineer

Infosys Ltd

Jun 2018 - Mar 2020 (1 year 9 months)

Maintained and enhanced .NET and AngularJS applications, working through complex enterprise codebases and legacy architecture. Delivered Secure Design Principles training to 30+ engineers, establishing a proactive security culture within a non-security team.

.NET AngularJS Legacy Systems Secure Design Training

OSINT Analyst

IT KART

May 2017 - Aug 2017 (3 months)

Performed external attack surface management across 3 client environments, enumerating 17 subdomains via OSINT, subdomain enumeration, and port analysis. Conducted API security testing and identified roughly a dozen leaked credentials in public Git repositories.

OSINT Subdomain Enumeration Port Analysis API Security Testing Git