Lakshay Sharma

About Lakshay Sharma

Cyber Security Specialist with 7+ years of hands-on expertise across Application Security, Cloud Architecture, and DevSecOps, securing environments on AWS, Azure, GCP, and Rancher. I specialize in integrating security into CI/CD workflows using Infrastructure-as-Code, Security-as-Code, and Compliance-as-Code ensuring systems are resilient, compliant, and threat-aware from development to production.Skilled in automating deployments with Docker and Kubernetes, embedding security controls throughout the SDLC, and aligning detection logic with MITRE ATT & CK. I’ve led threat modeling, red team engagements, and APT simulations, delivering actionable insights and strengthening incident response capabilities.Experienced in full-spectrum security assessments from black-box testing, exploit development, and network/infrastructure pentesting to securing cloud workloads and building lab environments for tabletop exercises. I focus on building systems that are not just secure by design but hardened through continuous validation and real-world adversary emulation.

Experience

1. Specialist - Cyber Security

   LTIMindtree

   May 2024 — Present · IN

   Designed and secured multi-cloud environments across AWS, Azure, GCP, and Rancher, embedding Security-as-Code, Infrastructure-as-Code into CI/CD pipelines for scalable, policy-driven deployments. Led advanced threat modeling, vulnerability assessments, and red team simulations to proactively identify and mitigate risks.Integrated SAST, DAST, SCA, and container security into DevSecOps workflows, automating security gates across the SDLC and mapping detection logic to MITRE ATT & CK techniques for continuous threat validation.Delivered automated deployment pipelines and built adversary simulation labs for tabletop exercises, while maintaining robust configuration management and version control across cross-functional engineering and security teams.Conducted comprehensive VAPT engagements and led vulnerability management workflows, incorporating risk assessment and incident response strategies to strengthen organizational security posture.