I want to understand how frontier AI can fail in ways we don’t expect, and to catch those failures before they happen. On Microsoft’s AI Red Team, I build attacks and evaluations to investigate emerging risks, with a focus on autonomy, loss of control, and multi-agent security.
I completed my PhD at NYU’s Center for Cyber Security, advised by Dr. Christina Pöpper. Previously, I was a Research Manager at MATS, overseeing projects on evaluation awareness and reward hacking. I also worked on privacy-preserving machine learning at Spotify Research.
Recent News
Oct 2026
Presented "Beyond Single-Agent Safety: Risks in Agent Networks" at the Advancing the Science of AI Agent Evaluation and Governance workshop, co-hosted by Carnegie Mellon University and Microsoft Research.
Oct 2026
Serving on the program committees for USENIX Security 2027 and AAAI 2027.
Aug 2026
Can a model's reasoning look benign while hiding a backdoor? In Evading Chain-of-Thought Monitoring Through Model Poisoning, we show how poisoned reasoning models can conceal backdoor behavior from their chain-of-thought traces.
Selected Research
Microsoft Research Blog, 2026
arXiv preprint, 2026
MLCommons AI Risk & Reliability Program, 2026
Microsoft white paper, 2026
USENIX Security Symposium, Seattle, US, 2025 Distinguished Artifact Award
ML4H @ NeurIPS, New Orleans, US, 2023 Best Paper Award
USENIX Security Symposium, Anaheim, US, 2023
Complete list on Google Scholar