Matheus Theodoro

AI Security Engineer

Working on AI security.

Founder & AI Security Engineer

Founded and ran a practical AI security practice for companies shipping LLM applications, agents, and AI-enabled products.

• Built OSlit — an autonomous security agent for testing blockchain systems
• Ran adversarial campaigns using PAIR, TAP, Crescendo, GS-MCTS across 4+ attack objectives
• Implemented JudgeAgent/G-Eval scoring with OWASP LLM and MITRE ATLAS categories
• Built defense synthesis pipeline: exploit trace → scoped guardrail → replay validation → promotion evidence
• Delivered AI red-team assessments, prompt injection testing, and agentic security reviews for multiple clients

Software Engineer II

Building secure cloud infrastructure and backend systems for SaaS platforms operating at scale.

• Architected backend APIs and cloud infrastructure serving 10+ clients with 99.9% availability
• Designed and maintained AWS/Kubernetes deployments with mTLS, RBAC, and secure data storage
• Built telemetry and monitoring pipelines using Elastic Stack for distributed systems observability
• Implemented CI/CD pipelines and secure SDLC practices across the engineering stack
• Protected $2.8M+ in client revenue through infrastructure reliability and security controls

DevSecOps / Software Engineer

Integrated security practices into the software development lifecycle and cloud operations.

• Implemented secure SDLC practices including credential handling, input validation, and access controls
• Built and maintained cloud infrastructure with monitoring, alerting, and incident response
• Developed backend services and APIs with Python and JavaScript across distributed systems
• Established security review processes for code deployments and infrastructure changes