// AI Security Engineer · EY  —  Kerala, India

I build, research, teach & secure technology.

I'm Adnan Kakkattil — an AI Security Engineer at EY, vulnerability researcher, full-stack & AI engineer and cybersecurity educator. It started with a phone and Termux; by 18 I was working in security. The curiosity remains.

adnan@journey:~


          
0standard — where it all began
0students trained in cybersecurity & development
0AI & cybersecurity conference publications
0my age when I started working in security
01

I didn't start with a lab.
I started with curiosity.

Chapter 01 — The beginning

My journey into cybersecurity began in the sixth standard — with a mobile phone, later a tablet, Linux tools and Termux.

No sophisticated computers, no expensive equipment, no professional lab. What began as curiosity about hacking became an obsession with understanding how technology works, how systems fail and how vulnerabilities are discovered. I explored Linux, security tools, phishing concepts, spoofing and the fundamentals of offensive security — through experimentation, research, and a lot of trial and error.

Chapter 02 — The corona batch

From 10th standard to +2, I was part of the COVID batch — and I turned the lockdown into my lab.

While the world paused, I invested that time in building myself. I installed Kali Linux, went deep into hacking techniques and new technologies, and practiced everything hands-on until theory turned into real, practical skill.

Chapter 03 — Teaching while learning

When I joined my BSc Computer Science degree, I started teaching.

I took cybersecurity sessions for students and faculty, ran practical workshops for everyone from juniors to seniors, attended events, and led cyber-awareness sessions grounded in real cyberbullying cases I had worked on.

Chapter 04 — Taking the risk

At 18, I was already working in security.

Alongside my degree, I joined Thothsparkz LLP as a Junior Security Engineer — building application solutions and working as the company's cybersecurity consultant for a year. In my second year, I won the Red Team Hacker Academy scholarship exam in Calicut district, earned my penetration testing certification and was placed at Red Team Cyber Security Labs.

Offers followed. At 19 I joined Gritstone Technologies at Calicut Cyberpark — choosing real-world experience over an outdated syllabus. I stopped attending college to work full time, and with the support of my HOD and friends, I still completed my degree. By graduation, I already had three years of industry experience.

Chapter 05 — Security meets AI

At 21 I stepped back. At 22 I joined EY.

I resigned without another offer in hand to rest and reset. Then I joined EY as an AI Security Engineer, where I work today. Hacking, development and security consulting brought me here; now I'm moving into the place where cybersecurity and AI meet. Understanding how a system is designed helps me see how it might fail, and understanding how it fails helps me build better systems.

“The journey began with a phone and a desire to learn. The tools have changed, the systems have grown more complex — but the curiosity remains.”
  1. 6th std

    Phone + Termux

    First Linux tools on a mobile phone. Curiosity about how hacking works.

  2. 10th – +2 · COVID

    Lockdown lab

    Installed Kali Linux and turned lockdown into hands-on hacking practice.

  3. BSc CS

    Teaching on campus

    Sessions for students & faculty, workshops, cyberbullying awareness.

  4. Age 18

    Thothsparkz LLP

    Junior Security Engineer — app solutions & security consulting.

  5. 2nd year UG

    Red Team Labs

    Won the Red Team Hacker Academy scholarship; certified pentester and placed.

  6. Age 19

    Gritstone Technologies

    Calicut Cyberpark. Chose real-world work; 3 yrs experience by graduation.

  7. Age 21

    The pause

    Resigned without an offer to rest and reset.

  8. Age 22 · Now

    AI Security Engineer · EY

    Where cybersecurity meets AI.

02

No mentors. No money. Just time and the right sources.

Everything I know, I taught myself. There was no investment, no mentor and no course to buy — only time, reach and the patience to find relevant sources: open-source videos, free platforms, cybersecurity books and documentation. Purely self-led.

  1. 01

    Research

    Pick a topic and study it from cybersecurity books and open-source material.

  2. 02

    Understand

    Break it down until I can explain how and why it works.

  3. 03

    Take notes

    Write down what I understood, in my own words.

  4. 04

    Practice

    Do it hands-on. Theory only counts once it works on a real system.

  5. 05

    Doubt? Check notes

    Stuck? Go back to my notes first.

  6. 06

    Re-watch & update

    Still stuck? Revisit the videos, fix my notes, then practice again.

03

Skills, end to end.

Offensive security

  • Red teaming
  • Network hacking
  • System hacking
  • IoT hacking
  • Reverse engineering
  • Social engineering

System hacking across Windows, Linux, macOS & Android.

Intelligence & darknet

  • OSINT
  • Data leak & breach hunting
  • Darknet research
  • Privacy & anonymity

Physical & hardware

  • Physical pentesting
  • Lock picking
  • Hardware hacking

AI & defence

  • AI security
  • AI engineering
  • Blue teaming

Full-stack development

  • Python
  • Rust
  • PHP
  • Node.js
  • Go

Beyond the keyboard

  • Public speaking
  • Research & development
  • Training & mentoring
04

Four verbs. One practice.

/build

Build

Full-stack and AI applications, workflow automation and tools that solve practical engineering problems.

  • Full-stack
  • LLM apps
  • Automation
/research

Research

Vulnerability research across web, infrastructure and AI systems — with root-cause analysis and responsible disclosure.

  • VAPT
  • Vuln chains
  • LLM security
/teach

Teach

Hands-on, lab-driven cybersecurity education in Malayalam and English — reasoning over tool memorization.

  • Udemy
  • ZyrOps Academy
  • Talks
/secure

Secure

AI security at EY — threat modelling and assessing the new risks that emerge as AI enters enterprise software.

  • Prompt injection
  • AI red teaming
  • Governance
05

Vulnerability research portfolio.

Case studies, not claims. Each entry focuses on vulnerability class, root cause, impact and remediation. Sensitive details — credentials, exploit chains, internal infrastructure and organization names — are withheld unless disclosure has been authorized.

01 Disclosed · Remediated

Government & education systems

Research into state-level education management and university management platforms handling large volumes of student and institutional data.

Class
Broken access control · Information disclosure
Component
Student & institution records ██████████
Status
Reported to the responsible authority
Case study → coming soon
02 Critical · SQLi → RCE

SQL injection & server-side impact

An investigation into a biometric / attendance management server that progressed from SQL injection to remote code execution and broader server impact.

Class
SQL injection · Vulnerability chaining
Root cause
Unsanitized input ████████
Focus
Authorized validation, severity & scope
Case study → coming soon
03 AI / LLM

AI & LLM security

Prompt injection research in private programs, plus research into a household-restriction bypass on a major consumer streaming platform.

Class
Prompt injection · Business-logic bypass
Boundary
Model instructions vs. user input
Status
Subject to disclosure permission
Case study → coming soon
04 Infrastructure

Infrastructure & surveillance security

An assessment that identified exposure of more than 300 surveillance cameras at a multinational manufacturing facility.

Class
Exposed services · Weak access control
Scope
300+ IP cameras ██████
Outcome
Corrective actions recommended
Case study → coming soon

! All research was conducted within authorized testing boundaries and disclosed responsibly. Affected organizations are not named without permission.

06

Teaching & ZyrOps Academy.

Udemy · ZyrOps Academy · Malayalam

Advanced Practical Ethical Hacking

A continuously evolving, 100% hands-on course built for Malayalam-speaking learners — real-world demonstrations, labs and ethical hacking methodology, explained beginner-first.

  • Practical cybersecurity concepts
  • Real-world demonstrations
  • Hands-on labs & exercises
  • Ethical hacking methodologies
  • Industry best practices
  • New modules added regularly
100+students
Jul 2026launched

How I teach

  1. 01Hands-on demonstrations over slides
  2. 02Isolated labs you can break safely
  3. 03Real-world scenarios & objectives
  4. 04Reasoning, not memorizing tools
ZyrOps Academy · Dedicated LMS

Learn anywhere — web, Android & iOS

ZyrOps Academy has its own learning platform with mentor-led cohorts, real attack labs, portfolio projects and placement support — across ethical hacking, SOC, web app testing, cloud and AI security. Trusted by 500+ cybersecurity learners.

  • Web
  • Android
  • iOS
academy.zyrops.com ↗
300+ students trained in cybersecurity & development
Founder

Zero Cost Skill Community

I learned everything for free, so I built a community where anyone can learn, earn and grow with skills — without money being the barrier.

  • 01Learn
  • 02Earn
  • 03Grow
07

Publications, speaking & community.

Conference publications

  • 20XX

    Paper title — AI security

    Authors · International Conference Name · DOI ↗

  • 20XX

    Paper title — Cybersecurity

    Authors · International Conference Name · DOI ↗

  • 20XX

    Paper title — AI / ML systems

    Authors · National Conference Name · DOI ↗

  • 20XX

    Paper title — Security research

    Authors · National Conference Name · DOI ↗

Speaking, training & events

  • Attended

    c0c0n 2026

    India's longest-running hacking & cybersecurity conference, Kochi. Met Cyble and explored AI-driven cyber threat intelligence.

  • Attended

    Kerala Cyber Suraksha Summit 2026

    Le Méridien Kochi, 5 Sep 2026 — AI defence, SOC operations, cloud risk and Zero Trust.

  • Speaker

    College sessions & cyber awareness

    Cybersecurity sessions for students and faculty, practical workshops from juniors to seniors, and awareness programmes based on real cyberbullying cases.

  • Trainer

    Corporate & academic training

    Lab-based cybersecurity training through ZyrOps Academy.

08

Projects & engineering.

AI Applications

AI-powered products

LLM-backed applications and agents that automate workflows and solve practical engineering problems — designed with security boundaries from day one.

  • LLMs
  • Agents
  • RAG
  • Python
Security Automation

Offensive tooling & automation

Scripts and pipelines that speed up recon, scanning and reporting during authorized assessments.

  • Recon
  • Bash
  • Python
Full-Stack

Full-stack products

End-to-end web applications — from API design and databases to polished, responsive frontends.

  • React
  • Node
  • APIs
Lab Environments

Vulnerable training labs

Isolated, objective-based lab environments used across my courses and training sessions.

  • Docker
  • VMs
  • CTF
Open Source

Open-source contributions

Tools, write-ups and lab material shared back with the security community.

  • GitHub
  • Write-ups

// What I'm working toward

Making emerging technology more secure — and helping more people understand it.

Open to AI security research, collaborations, conference talks, college sessions and corporate training.