Open to opportunities

Vertika Sharma

@vertikasharma

Message

I build vulnerability mitigations and endpoint security policies across Windows and Linux.

India

Message

What I'm looking for

I'm looking to build practical vulnerability mitigations and endpoint security capabilities, with opportunities to research exploitation techniques and reduce customer exposure to critical threats.

At Qualys, I develop cross-platform virtual patch mitigations for Windows and Linux in TruRisk Mitigate, addressing exploitable vulnerabilities without vendor patches or system downtime.

I perform root-cause analysis of vulnerabilities and exploitation techniques to design least-intrusive mitigations, including for Patch Tuesday, CISA KEV, and zero-day vulnerabilities within 24 hours of disclosure. I'm also building an AI-assisted EDR policy recommendation engine for Enterprise TruRisk Management, mapping CVEs to vendor-specific policies across CrowdStrike Falcon, Microsoft Defender for Endpoint, Trend Micro, and Palo Alto Cortex.

Previously, I researched APT initial-access mechanisms, system-call hooking, and kernel callback manipulation at DRDO Industry Academia. My background also includes vulnerability analysis of Microsoft web applications and server frameworks, proof-of-concept development, and PL/SQL product support for Oracle Flexcube.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

Qualys, Inc.

Mar 2025 - Present (1 year 6 months)

Developing cross-platform virtual patch mitigations for Windows and Linux and performing root cause analysis of vulnerabilities. Designing an AI-assisted EDR policy recommendation engine for the Enterprise TruRisk Management product.

PowerShell BASH Virtual Patching Vulnerability Research Root Cause Analysis CrowdStrike Falcon Cloud Security Microsoft Defender For Endpoint Trend Micro Palo Alto Cortex AI Claude

Senior Project Associate

DRDO Industry Academia

Apr 2024 - Mar 2025 (11 months)

Researched APT Initial Access Mechanisms and advanced system security evasion techniques, focusing on system call hooking and kernel callback manipulation.

APT Research System Calls Kernel Hooks Defense Evasion

Project Associate

DRDO Industry Academia

Dec 2023 - Mar 2024 (3 months)

Conducted comprehensive analysis of security vulnerabilities in Microsoft web applications and server frameworks. Developed proof-of-concept demonstrations using dnSpy, BurpSuite, and IDA Free.

Vulnerability Analysis DnSpy Burp suite IDA Freeware Heap Memory Corruption

Associate Consultant

Oracle Financial Services Software Ltd.

Sep 2020 - Sep 2022 (2 years)

Provided PL/SQL and RAD Tool expertise and support to clients such as HSBC UK, increasing productivity by 15% in customization of Flexcube Investor Servicing. Independently diagnosed root causes using log analysis and devised solutions for complex operational issues.

Pl SQL RAD Tool Flexcube Log Analysis Troubleshooting

Education

Degrees, certifications, and relevant coursework

Lancaster University

Master of Science, Cybersecurity

2022 - 2023

Activities and societies: Relevant Course: Digital Forensics, Penetration Testing

Master of Science in Cybersecurity with a dissertation on Digital Supply Chain Risk Management and Incident Response.

National Institute of Technology Hamirpur

Integrated Masters (M.Tech. and B.Tech.), Electronics and Communication Engineering

2015 - 2020

Integrated Masters (M.Tech. and B.Tech.) in Electronics and Communication Engineering with a dissertation on Hessian Elliptic Curves for RFID Security.