Navratna Sharma

Senior Cybersecurity Engineer with 6+ years of experience securing enterprise-scale cloud, infrastructure, and application environments. Specialized in vulnerability management, threat detection, IAM, and DevSecOps, with a strong focus on attack surface reduction, proactive risk mitigation, and security automation. Proven expertise in driving end-to-end security operations, including large-scale vulnerability remediation, SIEM-driven incident response, identity and access hardening, and secure CI/CD enablement.

Skilled in identifying and mitigating critical threats such as RCE, privilege escalation, and misconfigurations across distributed systems. Adept at translating complex threat intelligence into actionable security controls aligned with NIST, ISO 27001, HIPAA, and OWASP frameworks, enabling resilient architectures and strengthening enterprise security posture.

Senior Security Engineer - Escalent - Remote

(2025-05)

• Vulnerability Management & Risk Reduction: Remediated 1000+ vulnerabilities using Tenable and Blumira, including critical RCE, privilege escalation, and TLS weaknesses, reducing overall risk exposure to 40%.
• SIEM & Incident Response: Managed and triaged high-volume SIEM alerts (Blumira), reducing mean-time-to-response (MTTR) by 20%.
• Threat Detection Workflows: Designed proactive threat detection workflows that prevented potential breaches and minimized financial risk exposure.
• IAM Hardening: Strengthened IAM by enforcing least privilege, RBAC, and secure access policies, reducing unauthorized login attempts.
• Okta Security: Secured Okta environment with adaptive MFA and conditional access policies, reducing unauthorized login attempts.
• Security Automation: Automated patching workflows using Automox, improving remediation speed by 60%.
• DevSecOps Integration: Implemented SonarQube in CI/CD pipelines, reducing insecure code deployments by 30%.
• GRC & Compliance: Collaborated with GRC teams to ensure compliance with ISO 27001 and NIST frameworks.
• Cloud Security Hardening: Hardened Azure Cloud Environments with continuous monitoring, reducing misconfigurations and optimizing cloud costs.
• Network & Perimeter Security: Enhanced network security using Cloudflare (WAF, DDoS protection), mitigating external threats.
• Privileged Access Management (PAM): Implemented Privileged Access Management using Delinea, reducing insider threat risk.

Software Developer - Security & AWS - Helios Web Services - Jaipur

(2021-02 - 2023-04)

• Alexa & AWS Cloud Solutions: Developed and deployed Alexa skills for major clients (Expo 2020, Saudi Tourism, Naqel Express) hosted on AWS Lambda, incorporating secure coding practices and periodic vulnerability assessments to guard against threats.
• URL Generation: Designed AWS SAM templates and CloudFormation stacks to generate signed URLs and process sensitive chatbot history data, ensuring end-to-end encryption and adherence to HIPAA and ISO20001 standards.
• Secured AWS Lambda Functions: Secured AWS Lambda functions from injection attacks and unauthorized access ensuring end-to-end encryption and adherence to HIPAA and ISO20001 standards.

Cybersecurity Consultant & Secure Software Engineer - Talent Litmus - Mumbai

(2024-05 - 2024-09)

• Cloud Migration & Security: Managed the migration of legacy databases to AWS (leveraging VPC, ECS, EC2, S3, and CDN) with integrated vulnerability scanning and secure configuration reviews, ensuring a 35% reduction in potential exposure.
• SambaSafety: As a part of VMaaS (Vulnerability Management as a Service) Program, where I helped customers in remediating the critical findings with CISA KEVs, Ransomware, RCE/PE, and trending threats identified by different scanners (Nessus, Qualys).
• Automated Web Security: Developed a scanner that identifies vulnerabilities in websites using OWASP ZAP API and Nmap Scans.

Backend Developer & Vulnerability Management Engineer - Baazi Games - Delhi

(2023-06 - 2024-04)

• Secure System Design & Compliance: Engineered a highly scalable OTP registration service using Node.js, Typescript with MySql. Implemented secure authentication, authorization (incorporating multi-factor authentication and encryption) to comply with HIPAA and ISO20001 standards, reducing breach risk by 40%. Designed secure API endpoints using industry-standard encryption and hashing techniques.
• SIEM & Incident Response: Developed custom dashboards aggregating logs and vulnerability scan data (via SIEM tools such as Splunk/ELK) for proactive threat monitoring and swift incident response.

Cybersecurity Researcher (Freelance and Self-Initiated Work) - WFH - Jaipur

(2019-07 - 2020-12)

• Security Automation: Developed custom security automation scripts for network scanning, log parsing, and basic anomaly detection, reducing manual effort in assessments.
• Ethical Hacking: Conducted ethical hacking & penetration testing on various web applications.
• Attack Simulations: Strengthened hands-on expertise through CTFs and lab-based attack simulations, focusing on real-world exploitation techniques.

Bachelor of Technology (B.Tech) - Information Technology (IT) - IIIT ALLAHABAD (2019)

Senior Secondary - CBSE (2012)