Akshit Sharma

Background

About Akshit Sharma

Cybersecurity consultant specialising in the domains of Cloud Security, DevSecOps and Security Engineering. I help clients conceive, design and implement security programs. My expertise lies in-> Cloud Security: Performing security reviews/assessments, pentests based on either custom work-programs or industry recognised standards (e.g. from NIST, CSA etc.). Architecture and design review of cloud based solutions and implementations-> DevSecOps: Assessing the security of existing CI-CD pipelines in different environments (GitHub, Azure DevOps etc.). Designing and implementing secure-by-design pipelines incorporating relevant security checks and best practices-> Security Engineering: Building integrations and automation accelerators to improve the security posture and further an organisation's maturity vis-a-vis cybersecurity. Examples include building a cloud-native security monitoring solution (for Kubernetes and other important cloud services), integrating third-party security tools into existing development pipelines, building a golden AMI pipeline, security posture reporting, ticketing & analytical utilities etc-> Threat Modelling: Creating threat models for various types of existing and new systems based on industry recognised models like STRIDE. Training development teams on the same so that they can incorporate it in their routine-> Training & Awareness: Conducting internal and external training sessions on topics such as Threat Modelling, OWASP Top-10, DevSecOps, Cloud security certifications etc-> Threat & Vulnerability Management: Designing, implementing and operating Vulnerability Management services for complex IT environments. Providing assistance in prioritising vulnerabilities, sharing security insights and flagging potential issues-> Application Security: Performing manual and automated (SAST, DAST) testing on web applications hosted in various environments to look for security issues-> Cyber Threat Profiling: Assessing the risk exposure of a client's infrastructure (Applications, Network, Servers etc.) through mostly passive mechanisms by analysing footprint of the client organisation on open as well as dark web.