Edinburgh, United Kingdom

// MSc Cyber Security  ·  Independent Security Researcher  ·  SOC Analyst

Cyber security graduate from the University of Edinburgh bridging AI security research and information security governance. Building compliance frameworks for clinical AI systems, conducting adversarial evaluations of frontier AI models, and engineering detection tooling across SIEM/XDR and clinical AI environments.

0+Projects
0Papers & Talks
0+Certifications
Threat Detection SIEM / XDR ISO 27001 AI Security Incident Response GRC Penetration Testing Zero-Knowledge Proofs
Raya Rohith Yadav
// 01

About_Me

I am a Cyber Security MSc graduate from the University of Edinburgh with a foundation in Electronics and Communication Engineering from Anna University. My work spans two tracks: AI security research and information security governance.

On the research side, I build automated evaluation pipelines in Python for frontier AI systems (GPT-4, Claude, Gemini), run adversarial testing workflows, and develop detection tooling across SIEM/XDR stacks. As an AI Training Consultant at iMerit Technology, I evaluate model outputs against OWASP LLM Top 10 and MITRE ATLAS. As an Independent Security Researcher, I contributed to the Nemesys Insights adversarial evaluation of AI agents in ICS/OT environments for the AI Safety Fund / Frontier Model Forum.

On the governance side, I author risk registers, control mappings, and compliance documentation aligned to NIST AI RMF, ISO 27001:2022, and EU AI Act. I am building ClinRAG-Guard, an open-source compliance framework for clinical RAG knowledge base integrity with provenance tracking and retraction checking mapped to Article 10.

I delivered a conference talk at the Digital Research Conference 2026 at the Edinburgh Futures Institute on Zero-Knowledge Governance, proposing a cryptographic framework for auditing research integrity in Secure Multi-Party Computation environments.

Status Open to Opportunities
Location Edinburgh, UK
Work Auth UK Graduate Visa (Jan 2028)
Clearance BPSS / SC Eligible
// 02

Education

MSc Cyber Security, Privacy and Trust

The University of Edinburgh
2023 to 2025
  • Dissertation: Tor Browser traffic fingerprinting using supervised machine learning (Random Forest, SVM, XGBoost), achieving 81 to 88% classification accuracy
  • Conference Speaker at Digital Research Conference 2026, Edinburgh Futures Institute
Threat DetectionCryptographyPrivacyMachine LearningISO 27001

BEng Electronics and Communication Engineering

Anna University, Chennai
2019 to 2023
  • Thesis: Hybrid Routing Protocol for MANETs using NS2 simulation, achieving 99.61% packet delivery rate
  • Class Representative for 4 years; organised Cisco-led cryptography workshop
Network ProtocolsEmbedded SystemsSignal ProcessingWireless Communication
// 03

Experience

Independent Security Researcher

Independent
Jun 2025 to Present
  • Building ClinRAG-Guard, an open-source compliance framework for clinical RAG knowledge base integrity with provenance tracking and retraction checking mapped to EU AI Act Article 10
  • Contributed to the Nemesys Insights adversarial evaluation of AI agents in ICS/OT environments for the AI Safety Fund / Frontier Model Forum
  • Author AI governance documentation including risk registers and control mappings aligned to NIST AI RMF, ISO 27001:2022, and EU AI Act
  • Built a Microsoft Sentinel SOC monitoring lab with custom KQL detection rules for brute force, privilege escalation, and lateral movement mapped to MITRE ATT&CK
AI SafetyAI GovernanceNIST AI RMFEU AI ActSentinelKQLICS/OT

AI Training Consultant

iMerit Technology
Feb 2026 to Present
  • Evaluate AI system outputs across client environments (GPT-4, Claude, Gemini) for quality, safety, and compliance risks
  • Build automated evaluation pipelines in Python for model quality assurance and adversarial testing workflows
  • Map evaluation findings to OWASP LLM Top 10 and MITRE ATLAS taxonomies for structured reporting
LLM EvaluationPythonOWASP LLM Top 10MITRE ATLASAdversarial Testing

Co-Production and Experience Manager

TEDxLeith
Feb 2026 to Oct 2026
  • Managed end-to-end production for a 100-person independently organised TEDx event under TED licensing compliance
  • Coordinated 20 volunteers across AV, ticketing (Humanitix), venue logistics, and sponsor delivery
  • Liaised with AV contractors, venue management, and production teams to ensure seamless event execution
Event ManagementStakeholder CoordinationLogisticsTED Licensing

Cyber Security Analyst (Intern)

Hactify Cyber Security (Remote)
Feb 2025 to Nov 2025
  • Assessed security posture across 80-100 client Microsoft 365 environments, triaging Defender alerts and investigating credential access and data exposure incidents
  • Confirmed 10+ credential access and data exposure incidents through cross-log correlation across Defender XDR, Splunk, and Azure AD
  • Built automated assessment tooling in Python (4 APIs, Streamlit dashboard) cutting analyst time by 40%
  • Conducted web application vulnerability assessments following OWASP Testing Guide; delivered plain-language findings reports to non-technical clients
SOC OperationsDefender XDRSplunkPythonMITRE ATT&CKOWASP

Cloud Security Bootcamp

Virtually Testing Foundation
Oct 2025
  • Completed intensive cloud security programme with focus on GCP security architecture and cloud-native controls
GCPCloud SecurityIAM

Cyber Security Intern

AICTE / IBM (Remote)
Nov 2024 to Jan 2025
  • Designed an AI-based malware detection system using Python, Scikit-learn, and TensorFlow
  • Analysed network traffic captured via Wireshark to train anomaly detection models
  • Developed real-time threat alerting and reporting dashboards with Power BI
PythonTensorFlowWiresharkPower BIMalware Detection

Students as Change Agents

University of Edinburgh
May 2024 to Jul 2024
  • Contributed to a multidisciplinary student-led project with Eildon Housing Association, Scottish Borders Housing Association, and South of Scotland Enterprise
  • Researched and evaluated net-zero retrofit strategies, cost feasibility, and real-world implementation challenges for Scottish housing organisations
ResearchSustainabilityStakeholder Engagement

Venue Operations Team Member

Edinburgh University Students' Association
Oct 2024 to Present
  • Food and beverage operations across Teviot Garden Bar, Union Social, and Potterrow venues
  • Team Leader responsibilities including shift coordination and staff management
Team LeadershipOperationsCustomer Service

IoT Security Intern

BSNL, Chennai
Aug 2021
  • Worked on live IoT telemetry monitoring using MQTT and LoRaWAN with Raspberry Pi and Arduino
  • Integrated AWS IoT Core for secure cloud connectivity; performed traffic analysis with Wireshark
IoTMQTTAWS IoTWireshark
// 04

Projects

ClinRAG-Guard: Clinical RAG Compliance Framework

Open-source compliance framework for clinical RAG knowledge base integrity. Implements provenance tracking, temporal validation, retraction checking against NICE, BNF, and NHS England. Mapped to EU AI Act Article 10 and MHRA AI regulatory framework. Targeting WISTP 2027 publication.

AI GovernanceEU AI ActPythonRAGClinical AI
SAFAI Safety Fund

Nemesys ICS/OT Adversarial Evaluation

Adversarial evaluation of AI agents in industrial control systems for the AI Safety Fund / Frontier Model Forum. Assessed goal misalignment, data leakage, and privilege escalation risks in ICS/OT environments. Mapped findings to MITRE ATLAS.

AI SafetyICS/OTAdversarial MLMITRE ATLAS

SOC Monitoring and Incident Analysis Platform

Microsoft Sentinel SIEM with custom KQL detection rules for brute force, suspicious sign-ins, privilege escalation, and lateral movement. Full incident reports and operational runbooks mapped to MITRE ATT&CK.

SentinelKQLDefender XDRMITRE ATT&CK

ISO 27001 ISMS Implementation: CloudRise Analytics

Audit-grade ISMS portfolio for a fictional SaaS scenario. Full Annex A documentation, risk register, Statement of Applicability, internal audit execution with CAPA lifecycle and closure evidence.

ISO 27001GRCInternal AuditNIST CSF

Web Application Vulnerability Assessment

Structured assessment of DVWA and OWASP Juice Shop across OWASP Top 10 (2021). 10 confirmed findings including SQLi (9.9 CVSS), file upload RCE, broken authentication, XSS, IDOR, and CSRF.

Burp SuiteOWASPCVSS v3.1Nmap

Tor Browser Traffic Fingerprinting: MSc Dissertation

Supervised ML system classifying Tor Browser traffic with 81 to 88% accuracy using Random Forest, SVM, and XGBoost. Addresses anonymisation network detection as a threat to network visibility.

PythonScikit-learnTraffic AnalysisPrivacy

Zero-Knowledge Governance: DRC 2026

Governance framework combining SMPC and zero-knowledge proofs to audit research integrity without exposing sensitive data. Presented as a conference talk at Edinburgh Futures Institute, February 2026.

ZKPSMPCCryptographyGovernance

Web Phishing Detection using Machine Learning

Classification system detecting phishing URLs based on domain identity, URL structure, and SSL indicators. Flask web app deployed on IBM Watson Studio. Collaborative undergraduate project (AICTE / IBM).

PythonScikit-learnFlaskIBM Watson
// 05

Skills

Security Operations
  • Microsoft Sentinel (SIEM)
  • Defender XDR / EDR
  • KQL Detection Rules
  • Incident Triage and Response
  • MITRE ATT&CK
  • CVSS v3.1 Scoring
  • Wireshark / Nmap
  • Qualys VMDR
  • SentinelOne EDR
  • Splunk
Offensive Security
  • Burp Suite
  • OWASP Top 10
  • Web Application VA
  • Metasploit
  • Kali Linux
  • OSINT / Shodan
  • Nmap / Gobuster
GRC and Compliance
  • ISO 27001 / 27002
  • NIST CSF 2.0
  • SOC 2 Type II Mapping
  • Risk Register and SoA
  • Internal Audit (CAPA)
  • GDPR / UK GDPR
  • Data Protection
  • EU AI Act
AI and Security
  • Agentic AI Architectures
  • ZAG Pipelines
  • OWASP LLM Top 10
  • MITRE ATLAS
  • Prompt Injection Defence
  • LLM Model Evaluation
  • Zero-Knowledge Proofs
  • NIST AI RMF
Languages and Tools
  • Python
  • KQL
  • Bash / PowerShell
  • JavaScript / TypeScript
  • SQL
  • Git / GitHub
  • Docker
  • React
Cloud and Infrastructure
  • Microsoft Azure
  • AWS (IoT Core, Foundations)
  • Google Cloud Platform
  • Azure AD / Entra ID
  • Microsoft 365 Security
  • Linux / macOS Administration
ML and Data
  • Scikit-learn
  • TensorFlow / Keras
  • Pandas / NumPy
  • Power BI
  • Zeek (Network ML)
  • Anomaly Detection
  • Traffic Classification
// 06

Achievements

Digital Research Conference 2026
Conference Speaker

Digital Research Conference 2026

Edinburgh Futures Institute, University of Edinburgh, 26 February 2026. Presented a lightning talk on Zero-Knowledge Governance: Auditing Research Integrity in Secure Multi-Party Computation (SMPC). Session chaired by Professor John Vines on Ethics, Security and Integrity in Digital Research.

ZKPSMPCResearch IntegrityCryptographic Governance
ACM
ACM CCS 2026 (In Preparation). Research on adversarial evaluation methodologies for frontier AI systems in critical infrastructure environments.
WISTP
WISTP 2027 (In Preparation). ClinRAG-Guard: Compliance framework for clinical RAG knowledge base integrity, mapped to EU AI Act Article 10 and MHRA AI regulatory framework.
IEEE
IEEE ICONSTEM 2024 Publication. A Comparative Study of Ad-Hoc Networks for Hybrid Protocol Development.View Paper
IEEE
IEEE ICACITE 2023 Publication. An Empirical Assessment of Wireless Communication Technology Issues in the Smart Home.View Paper
AWARD
Runner-Up, Techgium Hackathon by L&T. Recognised for AI-driven aerospace maintenance forecasting at a national-level challenge hosted by Larsen and Toubro.
AWARD
Runner-Up, Smart India Hackathon (ARSENICS). Wearable obstacle detection system for visually impaired prosthetic limb users. University-level runner-up.
CR
Class Representative, 4 Years. Represented 60+ students at Rajalakshmi Engineering College. Organised a Cisco-led cryptography workshop, co-led a national symposium with 2,000+ participants, and published two IEEE papers during tenure.
ED
Chief Editor, ElComm Magazine 2022. Led editorial strategy, content selection, and design for the department magazine.
// 07

Certifications

Held

🔬Anthropic Cyber Verification Programme (Approved Researcher)
🛡️ISO/IEC 27001:2022 Lead Implementer (ICDFA)
MITREMITRE ATT&CK Foundations (AttackIQ) 🤖AI for Cybersecurity (LinkedIn Learning) ☁️AWS Academy Cloud Foundations
🔐Certified Ethical Hacking Essentials (EC-Council)
🌐Cisco Cyber Security Essentials
☁️Google Cloud Infrastructure (4-Course Series)
🖧VMware Network Virtualization Concepts
☁️VTF Cloud Security Bootcamp (GCP)
Edinburgh AwardThe Edinburgh Award (Students as Change Agents)

Industry Simulations (Forage)

TataTata Group Cybersecurity Analyst MastercardMastercard Cybersecurity
🏦Goldman Sachs Cybersecurity
🏢AIG Cybersecurity

In Progress

🎯CompTIA Security+
🔥Fortinet NSE 4: FortiOS Administrator
☁️SC-200: Microsoft Security Operations Analyst
☁️SC-900: Microsoft Security Fundamentals
🎓Columbia University: Cybersecurity, AI and Governance
// 08

Coding Profiles

TryHackMeTryHackMe: SOC / Red Team InterviewBitInterviewBit: University Rank 1 LeetCodeLeetCode
// 09

Contact

EMAIL
Emailrohithyadavraya@gmail.com
LI
LinkedInraya-rohith-yadav
GH
GitHubRayaRohith