Francesco Paolo Lezza

About Me (updated 10-2026)

I’m a Senior Backend Engineer working on AI security. My background is .NET/Azure production systems, monitoring, and incident response.

AI is going to be part of the systems we build, whether we are ready for it or not. I’m interested in understanding how these systems actually work, where their trust boundaries are, and what can go wrong before we start relying on them in practice.

I build tools that make the implicit trust model in LLM systems explicit. I come to AI security from C, llama.cpp and model internals, plus application security applied to LLMs and agents.

My open-source projects:

I also write about AI, security, and the assumptions we make around these systems here. The writing is not always technical; it is often where I explore a question before turning it into an engineering problem.


Technical Stack

Daily Work: .NET Core/Framework, C#, Docker, Kubernetes, MS SQL Server, Couchbase, Jenkins, Git, xUnit

Monitoring & Operations: Splunk (Certified), AppDynamics, Dynatrace, ServiceNow, Jira

Security & AI Research: OWASP LLM Top 10, LLM security testing, prompt injection analysis, agent tool-call security, supply chain risk (npm), steganography, llama.cpp, GGUF internals


Current Role

Allocated to Swiss financial services client as Near-Shore KTLO team member maintaining business-critical .NET applications and batch procedures. Resolving incidents under SLA, delivering code on time, managing containerized deployments.


Certifications