Adithya Karthikeyan

I am Adithya Karthikeyan. I hold a Master’s degree in Electrical and Computer Engineering (majoring in Networking and Cybersecurity) from San Jose State University.

I currently work at Meta as a security engineer and have worked on securing products such as Facebook, WhatsApp, and Instagram. As of 2025, I focus on securing large language model development (Llama models particularly), building prompt-injection guardrails, and agent security infrastructure.

Prior to Meta, I was at Twilio, where I led the bug bounty and penetration testing programs and worked across traditional application security duties, including threat modeling, code reviews, and security reviews. I was also responsible for leading container security efforts shortly before I left. Before that, I was at Seagate, where I mostly worked on things related to infrastructure security like distributed secrets management solutions spanning encryption, system security, key and certificate management. Since I was on the research team, I had the oppurtunity to work on cool projects like secure multiparty computation, privacy-enhancing technologies (such as homomorphic encryption and differential privacy), and the security of cryptographic protocols.

My interests span security across the stack — from application and infrastructure security to networking, distributed systems, trusted and confidential computing, privacy, and emerging areas such as LLM and agentic system security.

I write about security research, vulnerabilities, technical observations, and things I find interesting along the way.

This site is where I keep my writing and, over time, a record of the work I've done.

Outside of work, I enjoy participating in CTFs (something I did more regularly until 2023), hunt for vulnerabilities in open-source projects, mentor folks interested in security, and volunteer with my local OWASP chapter where I speak and help run events. I also love skiing, bouldering, watching anime, driving fast cars on winding roads, and traveling.

Opinions are my own and do not necessarily reflect the views of my employer.