Open to opportunities

ujjwal sharma

@ujjwalsharma2

I am a results-driven application security engineer securing SDLC, reducing vulnerabilities and mentoring development teams.

India

Message

What I'm looking for

I'm seeking an Application Security or DevSecOps role where I can integrate security into the SDLC, architect WAF/CSPM solutions, mentor developers, and reduce vulnerabilities through automation and threat hunting.

I am a results-driven application security engineer with over 6 years of experience securing the full software development lifecycle, integrating SAST, SCA and DAST into CI/CD pipelines, and performing web application penetration testing.

I built and tuned a Web Application Firewall from the ground up, creating over 700 custom exclusions and reducing false positives by 30%. I led remediation efforts that shortened average time-to-fix by 15%, discovered a WAF bypass, and remediated 50+ exposed secrets using CSPM.

I collaborate closely with engineering teams to mentor on secure coding, validate third-party penetration tests, and implement threat hunting and incident response processes—applying a pragmatic, automation-first approach to reduce security debt and improve detection.

Experience

Work history, roles, and key accomplishments

Current

Application Security Engineer

Current

Ensemble Health Partners

Jul 2022 - Present (3 years 3 months)

Built and tuned a Web Application Firewall and integrated AppSec toolchains (SAST/SCA/DAST) into CI/CD, reducing false positives by 30% and driving a 15% average time-to-fix improvement for critical applications.

SAST SCA DAST WAF Snyk Probely Burp suite Threat Modeling

Security Operations Center Analyst

LinearCyber

Apr 2021 - Jul 2022 (1 year 3 months)

Monitored and tuned EDR, SIEM, and email security tools to improve SOC detection accuracy by 25% and isolated over 100 malicious payloads through sandbox analysis and containment.

SIEM EDR Mimecast Carbon Black Threat Hunting Incident Response Alert Tuning

Security Operations Center Analyst

Ethicalhat CyberSecurity Pvt Ltd.

Sep 2019 - Apr 2021 (1 year 7 months)

Conducted real-time SIEM monitoring and incident handling, led security awareness training for 200+ employees which reduced phishing-related support tickets by 35% within a quarter.

Splunk LogRhythm ProofPoint Phishing Security Awareness