Aryan Sharma

Product Engineer

Hyderabad, Telangana, India6 yrs 2 mos experience

Key Highlights

Led research initiatives in product engineering.
Engineered cost-saving vulnerability management platforms.
Developed end-to-end encrypted applications.

Stackforce AI infers this person is a SaaS-focused cybersecurity engineer with strong DevSecOps expertise.

Contact

Skills

Core Skills

InfrastructureSoftware DevelopmentDevsecopsCyber Threat Intelligence

Other Skills

AutomationBashC (Programming Language)C++Computer ScienceCryptographyCyber Threat Intelligence (CTI)CybersecurityDockerFastAPIGo (Programming Language)Google Cloud Platform (GCP)IT OperationsJSONJavaScript

About

(If you're searching for jobs, please check the posts I liked in the Activity section. Not limited to tech roles) Hi! If you received a connection request from me without any message, it's due to LinkedIn's free tier limitation. Would love to connect! Currently doing Product Engineering and leading Research at Blueflag Security. Volunteer at DevelopersIndia Community. I have: - Built owner-prediction capabilities, enabling stakeholders to generate actionable reports sharing teams and owners responsible for mitigation of vulnerabilities. - Helped build Code-to-Cloud capabilities by tracing commit throughout SDLC. - Architected an efficient SCA solution using open-source tools, enabling Gojek to scan ~60k repositories. - Implemented secret scanning solution across the entire GoTo Group (Gojek, GoTo Financial, GoTo Logistics, and Tokopedia), ensuring uniform security measures. - Helped build vulnerability management tool, used by GoTo's security team to manage vulnerabilities across all operating companies. In the past, I've worked with Facebook and Ashoka's CIPHER Lab joint initiative on traceability in end-to-end encryption in WhatsApp and researched on ransomware attacks prediction during my research stint at Safe Security. Google Cloud Certified, and ever eager to learn and improve!

Experience

Blueflag security

Product Engineer, Research

Jun 2024 – Present · 1 yr 9 mos · Hyderabad, Telangana, India · On-site

Involved in all-things-engineering, analytics, and security.

Go (Programming Language)Python (Programming Language)TerraformFastAPIInfrastructureSoftware Development

Gojek

Software Engineer (DevSecOps)

Jun 2022 – May 2024 · 1 yr 11 mos · Gurugram, Haryana, India · On-site

Engineered an internal Software Composition Analysis (SCA) platform used by engineers to scan 60k+ repositories across 3 operating companies, saving ~$600k in annual licensing fees.
Automated repo owner identification by developing a predictive analytics service correlating data from GitLab and Workday, saving hours in vulnerability remediation.
Built the centralized Vulnerability Management platform for three operating companies (Gojek, GoTo Financial, Tokopedia), creating a single source of truth by ingesting, deduplicating, and normalizing data from 6+ scanner sources.
Streamlined vulnerability management workflow by implementing two-way status sync with scanning tools and Jira connector for automated ticketing to eliminate manual follow-ups.

Google Cloud Platform (GCP)Go (Programming Language)Software DevelopmentPython (Programming Language)PHPDevSecOps+1

Safe security

Research Intern

Dec 2021 – Jun 2022 · 6 mos · New Delhi, Delhi, India

Worked on an orchestration engine to collect intel from threat feeds on MISP.
Automated routine workflow using Bash scripts.
Analyzed attacker patterns to improve models for Cyber Risk Quantification.

Computer ScienceCyber Threat Intelligence (CTI)Software DevelopmentBashPython (Programming Language)Cyber Threat Intelligence

Unacademy

Mathematics Educator

Aug 2021 – Aug 2021 · 0 mo

Took lectures in Mathematics for class 8th CBSE board students
Designed and created content

Self-employed

Capture The Flag Experience

Jul 2021 – Jul 2021 · 0 mo

Participated in two CTFs in The Diana Initiative: Secure Code Warrior CTF and CISA-ICS CTF
Finished eighth in Secure Code Warrior CTF of 46 participants
Participated solo in Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) CTF and finished fifth out of 24 teams

Bash

Facebook cipher lab

Research Software Engineer Intern

Jun 2021 – Aug 2021 · 2 mos · Sonipat, Haryana, India

Facebook-funded project in collaboration with Data Security Council of India.
Developed E2E encrypted app using MERN Stack and Websockets.
Established GitHub workflow and demonstrated 3 techniques to trace
forwarded messages on WhatsApp under Prof Debayan Gupta.

Computer ScienceSoftware DevelopmentBashCryptographyReact.jsMongoDB

Ashoka university

Undergraduate Research Assistant

Jan 2021 – May 2021 · 4 mos · Sonipat, Haryana, India

Worked on Security of RFID (MIFARE) cards.

Computer Science

At&t

Summer Extern

Jun 2020 – Jul 2020 · 1 mo

Ashoka university

2 roles

Placements Coordinator

Oct 2019 – May 2022 · 2 yrs 7 mos · Sonipat, Haryana, India

Adjudicating and leading Placement/ Internship Jury discussions for three years
Administering placement portal with a database of 3500+ students and 600+ companies.
Coordinated campus recruitment of 796 students in cycle 2020-21 with nearly 1/3 receiving internship offers.

Student Government

Feb 2019 – Aug 2021 · 2 yrs 6 mos · Sonipat, Haryana, India

Supervised all Technology Ministry projects as Deputy Minister
Received Creative and Entrepreneurial Initiatives Award by OSA for initiatives for equal access to resources for all students
Spearheaded the Spare Phone project for assisting students in emergencies. Assisted 150+ students