Developer / Security / AI

NASH
PILLAI

CS @ Georgia Tech

I break assumptions and find security flaws in everything from APIs and AI systems to office doors.

PROJECTS

DEAP LEARNING

AI Tutors for Education

AI tutors trained for your courses. 300k users, $10k ARR. Built with Next.js.

deaplearning.com
PROGRESS IN CONGRESS

PROGRESS IN CONGRESS

Congressional Bill Tracker

Track bills through Congress. Won Congressional App Challenge, demoed at US Capitol.

progressincongress.org

STAPPLET

Interactive Statistics

Interactive statistics platform. 100k DAU. Found privilege escalation vuln, React reimplementation.

stapplet.com
TEDNITIATIVE

TEDNITIATIVE

Environmental Action

Stay informed and fight to defend the environment. Built with Next.js and Tailwind.

tednitiative.org
JAYBOTS INVENTORY

JAYBOTS INVENTORY

Parts Management System

Manage tens of thousands of parts for FTC robotics. Built with Next.js.

inventory.jaybots.org

EXPERIENCE

May 2026 – Present

Cybersecurity Intern

PrizePicks

  • Found all critical/high findings in the AppSec team's external pentest plus 14 additional findings, leading to 5 security incidents and ~$23k in HackerOne-equivalent value
  • Reviewed internal AI/MCP systems, finding a GCP root RCE, cross-user credential impersonation, OAuth/PKCE flaws, non-expiring JWTs, path traversal, and broad service-account scopes
  • Found IT and internal-tooling risks across company Macs, privileged Google Groups, 1Password vault access, production dashboards, and office physical access controls
  • Built CrowdStrike Falcon SIEM automation and alerts, including an MCP server, incident-response skill, and custom detections for new data sources
Aug 2025 – Present

Vice President & Former CTF Team Captain

GreyHat @ Georgia Tech

  • Led development of an LLM-based CTF solving agent with writeup-driven self-training
  • CSAW: 13th in North America; corCTF: top 10%; Buckeye CTF competitor
Aug 2023 – May 2026

Director of Web Development

Ember Learning

  • AP Exam Simulator: $400k revenue, 160k students
  • deaplearning.com: AI tutors, 300k users, $10k ARR
  • Infrastructure: Azure, Railway
  • Telemetry and observability with Sentry and PostHog; A/B testing for retention
June 2022 – May 2025

President & Programming Leader

Jaybots FTC #16700

  • Led the club to its first World Championship, winning #1 Judge's Choice
  • Built an inventory system with user management, part tracking, and supplier scrapers
  • Engineered production robot control software in Kotlin and Java
Python/Java/Kotlin/Gradle/SQL/PostgreSQL/Node.js/OpenCV/MongoDB/Git/TypeScript/JavaScript/React/Next.js/Redux/Tailwind CSS/CSS/Prisma/Stripe/Linux/NixOS/Azure/GCP/Bash/CI/CD/Docker/Cloudflare Zero Trust/Web App Pentesting/Burp Suite/OAuth/OIDC/SQL Injection/Cloud Security/Incident Response/Python/Java/Kotlin/Gradle/SQL/PostgreSQL/Node.js/OpenCV/MongoDB/Git/TypeScript/JavaScript/React/Next.js/Redux/Tailwind CSS/CSS/Prisma/Stripe/Linux/NixOS/Azure/GCP/Bash/CI/CD/Docker/Cloudflare Zero Trust/Web App Pentesting/Burp Suite/OAuth/OIDC/SQL Injection/Cloud Security/Incident Response/

SKILLS

Backend

PythonJavaKotlinGradleSQLPostgreSQLNode.jsOpenCVMongoDBGit

Web

TypeScriptJavaScriptReactNext.jsReduxTailwind CSSCSSPrismaStripe

DevOps

LinuxNixOSAzureGCPBashCI/CDDockerCloudflare Zero Trust

Security

Web App PentestingBurp SuiteOAuth/OIDCSQL InjectionCloud SecurityIncident Response

AWARDS

01

IBM Certified Cybersecurity Analyst

02

BSides Atlanta: 1st CTF

Youngest of 400+

03

AI Atlanta Hackathon

1st in two tracks

04

2x Lockheed Martin CyberQuest: 2nd

05

FTC World Championship

Dean's List Finalist

06

3x Control Award

Best robot code

07

CMIMC: 6th of 96

08

Congressional App Challenge Winner

Presented at US Capitol

09

Science Olympiad NY State

1st Robot Tour, 1st Forensics

TypeScript/JavaScript/React/Next.js/Redux/Tailwind CSS/CSS/Prisma/Stripe/Web App Pentesting/Burp Suite/OAuth/OIDC/SQL Injection/Cloud Security/Incident Response/Python/Java/Kotlin/Gradle/SQL/PostgreSQL/Node.js/OpenCV/MongoDB/Git/Linux/NixOS/Azure/GCP/Bash/CI/CD/Docker/Cloudflare Zero Trust/TypeScript/JavaScript/React/Next.js/Redux/Tailwind CSS/CSS/Prisma/Stripe/Web App Pentesting/Burp Suite/OAuth/OIDC/SQL Injection/Cloud Security/Incident Response/Python/Java/Kotlin/Gradle/SQL/PostgreSQL/Node.js/OpenCV/MongoDB/Git/Linux/NixOS/Azure/GCP/Bash/CI/CD/Docker/Cloudflare Zero Trust/

LET'S TALK

Always open to interesting projects, collaborations, and conversations about security, AI, or web development.

Nash Pillai