Monica Malik

I support enterprise security programs across vulnerability management, incident response, risk tracking, access governance, remediation coordination, and security workflow automation. My work includes triaging vulnerability reports, investigating security findings, assessing impact, prioritizing risks, authoring CVEs and security advisories, maintaining risk and issue trackers, and driving timely closure of vulnerabilities and incidents. I collaborate with engineering, SOC, DFIR, legal, audit, and business teams to improve security visibility, strengthen remediation processes, and support risk-based decision-making.

I also build automation using Python, Jenkins, Bash, JIRA-based workflows, DevSecOps practices, and AI-powered agents to streamline security operations, reduce manual effort, accelerate response, and improve overall security posture.

Senior Security Engineer at NetApp (2022-07 – Present)

• Triage and manage incoming vulnerability reports for NetApp, achieving a 98% closure rate within SLA. Collaborated with product engineering teams to expedite fixes for high-severity vulnerabilities, maintained relationships with external security researchers, authored CVEs, published advisories on NetApp ProdSec Portal and computed CVSS scores per v3.1/v4.0 standards
• Support enterprise security operations, vulnerability management, incident response, access governance, risk tracking, control documentation, and remediation coordination
• Led Shai-Hulud npm (2025) and Trivy (2026) supply chain attacks incidents: triaged alerts, assessed impact, & coordinated remediation steps
• Active core member of the EU CRA (Cyber Resilience Act) program for NetApp Product Security, supporting security and compliance readiness efforts across product security workflows
• Streamlined project tracking and incident response by automating workflows to ensure timely JIRA ticket closure and leading security audits that align with business and technical objectives, while collaborating with cross-functional teams (SDL, SOC, DFIR, Legal) to integrate security best practices into product development and deliver strategic risk assessments on emerging threats
• Architected, built, and deployed AI-powered agents for better workflows to automate processes, streamline vulnerability triaging and summarization, reduce manual intervention, and deliver rapid, data-driven responses to complex queries
• Designed and centralized a JIRA-based workflow system, integrating multiple communication channels into a unified tracking platform, enhancing visibility and execution
• Supported DevSecOps-driven automation using Python, Jenkins, and Bash, streamlining vulnerability management and improving end-to-end operational efficiency
• Led UAT and cross-functional collaboration as SME, translating business requirements into scalable tooling solutions and ensuring seamless adoption
• Delivered cybersecurity training sessions and workshops, incorporating technical demonstrations that showcased advanced security capabilities

Security Engineer at NetApp (2020-07 – 2022-06)

• Assisted in defining and overseeing NetApp's product security strategy & monitored security announcements to identify vulnerabilities in open source and third-party components
• Worked on various scan reports for product teams to help them remediate the issue (Pentest results, Qualys scan, Nessus scan, etc); also worked on Blackduck HUB and Redmine
• Investigated, reported, and tracked remediation and fixes for vulnerabilities; published advisories on the NetApp Security Advisory Portal
• Collaborated with the SDL team to design and implement robust security controls, ensuring the product met industry best practices and minimized vulnerabilities
• Scored vulnerabilities using CVSS v3.1 and CVSS v4
• Partnered with product teams, SAMs, customers, and stakeholders to enhance overall security posture
• Delivered technical trainings and workshops on cybersecurity best practices & Developed technical demonstrations showcasing advanced security capabilities
• Documented PSIRT workflow playbooks in a centralized manner, aligning processes with established security standards
• Collaborated effectively under pressure, consistently delivering professional and courteous technical expertise

Product Security Incident Response Team (PSIRT) Intern at NetApp (2020-01 – 2020-06)

• Developed a framework to track and map third-party components integrated in NetApp products using NVD-CPE definition standards, enhancing PSIRT's vulnerability reporting process
• Monitored vulnerabilities in third-party components, reporting findings to product teams and collaborating on remediation efforts while informing customers

Ph.D Scholar in Cyber Security – Indira Gandhi Delhi Technical University for Women (IGDTUW) (2023- Ongoing)

M.Tech in Information Security Management – Indira Gandhi Delhi Technical University for Women (IGDTUW) (2018-08 – 2020-06)

B.Tech in Computer Science – Jamia Hamdarad (2014-08 – 2018-06)