Praveen Sharma Email & Phone Number

Ashland, Ma, Us

Ashland, Ma, Us

Acton, Massachusetts, Us

Norwalk, Connecticut, Us

Accomplishments: - Elevating the security maturity of all the Print and Digital Services, 3rd-party products (deployed in FedRAMP, Global commercial environments), and established processes & requirements - Assisting developing Xerox's security strategy and managing multi-million dollar budgetsActivites: - Collaborating cross-functionally with Engineering, IT, Legal and Privacy - Leading * Global Product Security – secureSDLC (DevSecOps), Architecture Reviews and Pen testing, assisting in third-party risk management * Infrastructure and Cloud Security - managing detection, prevention, and response for the AWS, Azure, GCP deployed applications for misconfiguration, vulnerabilities, data security, threat intel, network exposure, poor access controls. * Vulnerability disclosure, product security information requests, and bug bounty programs * Enterprise-wide red-teaming * Cloud and product incident management - Hiring, managing, retaining, and mentoring global teams, vendors, and group finances. - Assisting the CISO with generating metrics towards briefing the Board. - Establishing standard processes and generating requirements (e.g. for Generative AI roll-out and build/buy process, and other product security aspects). - Supporting emerging Cyber Executive Orders and Regulatory requirements (e.g., White House Executive Order, CISA's software self-certification) and peers in Identity and Access Management (e.g. WAF and InTune Assessment and deployment)

Franklin Lakes, New Jersey, Us

Accomplishments: - Accountable for cyber and product security of MMS, assisted business to get the flagship products receive 510K FDA clearanceActivities: - Collaborated cross-functionally with Engineering, IT, Legal and Privacy, Quality - Briefed the executive committee on cyber risks of MMS products on a weekly-basis - Led all product-security activities (secureSDLC), vulnerability management, and coordinated vulnerability disclosures for ~1500 products, and supported 510K clearance requirement implementations - Managed finances and global teams for the group - Established cross-functional cyber integrated processes

Litmus: Product security for a SAAS platform. Risk and Compliance (SOC2, Enterprise risk assessment, enterprise-wide policies and procedures). Privacy (GDPR, CCPA, Privacy Shield). IT Security. Vendor Management. Security and Privacy Strategy. Vulnerability management.Advised/ Paperless Parts and Veracode - Drafted Enterprise-wide policies, and NIST 800-171 SSFSME for MIT HorizonDrafted SBIR In collaboration with MIT LL and MITRE - Developed Modernization 2021 Strategy for AI, Cloud and Data for the DoD CIO Assessed Security Operations of HHS and its Operating Divisions

Amsterdam, Noord-Holland, Nl

Overseeing roadmap for cyber innovative technologies, architecture, and engineering as well as the execution of technical concepts, tools, and capabilities for IT security. Examples include: 1. Platform development to report phishing (in one click), and detect and prevent phishing at the end-point; a tool to reduce analyst's overhead of handling phishing emails 2. Algorithms for detecting emerging threats via social media using time-domain (via AI) and frequency domain (via FFT) approaches 3. Design and prototyping of trust tool to monitor and detect certificate misusage, typosquatting, and brand misuse 4. Threat platform prototype that aggregates and visualizes diverse input (CVEs, darkweb, social media feeds,...)5. Metrics to evaluate cyber innovation and enterprise risks6. Red-teaming and penetration testing of enterprise-scale application and architecture7. A forward-looking prototype toward detecting counterfeiting, reverse engineering, and IP theft.8. Hardware and embedded security

Amsterdam, Noord-Holland, Nl

1. Security and privacy roadmap. a. Create security and privacy roadmap for on-premise and in-cloud deployed products. b. Design concepts and tools to ensure security and privacy and quality management of the platform is ensured. (Examples, create tools to prevent access via stolen and usage of a phished password; ensure continuous monitoring and diagnostics via creating a logging and monitoring architecture, ensure end-point hardening, creating role-based access, ensuring opensource vulnerabilities and most exploited vulnerabilities are patched)2. Risk and compliance. a. Draft policies and procedures to make the product ISO compliant using ISO 27001, 27002, 27017 and 27018, and NIST cybersecurity frameworks. b. Conduct audit of the Insights platform c. Assess qualitative and quantitative risks of the platform, and address CAPA.3. Information awareness - conduct training sessions4. Integrating security and privacy-by-design into the platform5. Security assessments. Ensure that internal and external security assessment of the platform is conducted and the findings are addressed.6. Data governance. Ensure that data is localized and minimized, geo-political regulations are adhered to.7. Cross-functional collaboration. Work with other departments to ensure that platform is used and customers are happy.

Lexington, Ma, Us

Prototyped and developed several products in big data - analytics and platforms (big data lake)Conducted large-scale system and architecture assessmentsCreated technology and cyber roadmaps for the MIT LL customersDevised, Refined standard frameworksAuthored several publications and have papers.Transitioned technology to one startupAdvised different branches of governments

Designed simulations for Missile Defense applicationsPrototyped several software for Quality of Service and LogisticsParticipated in large-scale real-life demonstrationsAssisted with business development by responding to RFPs (AFRL, DARPA)

Responsible for designing software for bio-informatics.

Master Of Science - Ms, Computer Science

Master Of Philosophy - Mphil, Life Sciences

Master'S Degree, Biotechnology

Data Modeling

Computer Science Coursework (Bs)

Bachelor Of Applied Science - Basc, Chemistry And Biochemistry