Rithik Sharma — Cybersecurity Engineer
Open to Work

Hi, I'm Rithik Sharma

I build secure systems, analyze vulnerabilities, and continuously learn modern cybersecurity practices through real-world projects and hands-on experience.

About Me

Raspberry Pi Zero with Kali Linux setup
Raspberry Pi Zero · Portable offensive lab
Self-hosted Nextcloud server on dual-laptop setup
Self-hosted Nextcloud · Parrot OS server
Custom GPS + sensor hardware prototype on breadboard
HetOTA hardware prototype · GPS + sensors

My journey into cybersecurity began with a curiosity about how systems work and how they can be secured against evolving threats. Since then, I have built practical experience through internships, hands-on labs, and personal projects — strengthening my foundation in vulnerability assessment, networking, Linux, cloud security, secure software development, and penetration testing.

I continuously expand my knowledge through platforms like Hack The Box and TryHackMe while exploring emerging technologies such as cloud computing, AI, and IoT. I believe cybersecurity is about more than finding vulnerabilities — it's about understanding systems, thinking like an attacker, and building resilient solutions that create a safer digital future.

Skills

Categorized skills across offensive security, defensive monitoring, programming, and the cloud / dev stack I use every day.

Programming Languages

Languages I use for scripting, automation, tooling, and building applications.

Python
Java
C
JavaScript
Bash

Cybersecurity

Core offensive and defensive security domains I work across in labs and projects.

Vulnerability Assessment
Penetration Testing
Network Security
Web App Security
OWASP Top 10
SASecurity Analysis
TDThreat Detection
STSecurity Testing

Security Tools

Hands-on tooling for recon, exploitation, monitoring, and post-exploitation.

Nmap
Burp Suite
OWASP ZAP
Wireshark
Metasploit
Snort
Aircrack-ng
Hydra
SQLMap
Nessus
OVOpenVAS
Gobuster
Wazuh
Git
GitHub
GCP
Docker

Platforms

Operating systems and runtimes I deploy, attack, and harden.

Linux
Windows
Kali Linux
Docker

Core Concepts

Theoretical foundations behind the tooling — what makes systems break and hold.

Networking
OSOperating Systems
Database Systems
CrCryptography
Cloud Security
IoTIoT Security
DevSecOps

Projects

ShredX preview

ShredX

Rust · NIST SP 800-88 Rev. 1

Problem
Enterprises need verifiable, irreversible destruction of sensitive data across heterogeneous storage media.
Action
Built a cross-platform sanitization utility in Rust implementing NIST SP 800-88 Rev. 1 patterns with memory-safe primitives and parallel I/O.
Outcome
Delivered a high-performance tool with deterministic wipe verification suitable for regulated environments.
Steganography Web App preview

Steganography Web App

Python · Flask · AES Encryption

Problem
Sensitive messages shared over public channels are trivially intercepted and inspected.
Action
Built and deployed a Flask web app that embeds AES-encrypted messages inside cover images, combining encryption with steganographic concealment.
Outcome
Achieved end-to-end confidentiality with a clean UX and reproducible extraction workflow.
Secure Heterogeneous OTA (HetOTA) preview

Secure Heterogeneous OTA (HetOTA)

IoT Security Lifecycle

Problem
IoT fleets ship insecure firmware update paths that expose devices to tampering and supply-chain attacks.
Action
Designed a secure OTA mechanism modeling the full firmware lifecycle: signing, transport integrity, rollback protection, and device attestation.
Outcome
Produced a hardened update reference flow suited to heterogeneous IoT deployments.

Experience

Short, focused internships where I shipped real security work — framed honestly as a final-year student building production exposure.

  • Jan 2025 – Feb 2025

    Cyber Security Intern

    Edunet Foundation

    Internship

    Conducted vulnerability assessments and network scanning using Nmap and Wireshark. Analyzed real-world attack scenarios and applied incident response workflows with risk-based vulnerability prioritization.

    NmapWiresharkVAPTIncident Response
  • May 2025 – Jun 2025

    AI Azure Intern

    Microsoft & Edunet

    Internship

    Built AI/ML pipelines on Microsoft Azure with exposure to cloud security services and identity management. Applied DevSecOps practices and explored AI-driven anomaly detection.

    AzureCloud SecurityDevSecOpsAI/ML

Certifications

Cisco Certified Network Associate (CCNA 200-301)
View Fullscreen

Cisco Certified Network Associate (CCNA 200-301)

Cisco

Cybersecurity Essentials
View Fullscreen

Cybersecurity Essentials

Cisco Networking Academy

AI-ML Engineer (PMKVY 4.0)
View Fullscreen

AI-ML Engineer (PMKVY 4.0)

National Skill Development Corporation (NSDC)

Microsoft Azure AI Internship
View Fullscreen

Microsoft Azure AI Internship

Microsoft & Edunet Foundation

Cyber Security Internship
View Fullscreen

Cyber Security Internship

Edunet Foundation & AICTE

VAPT Certification / Security Analyst
View Fullscreen

VAPT Certification / Security Analyst

Edunet Foundation

IBM SkillsBuild Certification
View Fullscreen

IBM SkillsBuild Certification

IBM & Edunet Foundation

NPTEL Ethical Hacking
View Fullscreen

NPTEL Ethical Hacking

IIT Kharagpur · Elite + Silver

NPTEL Computer Networks And Internet Protocol
View Fullscreen

NPTEL Computer Networks And Internet Protocol

IIT Kharagpur · Elite + Silver

NPTEL Practical Cyber Security
View Fullscreen

NPTEL Practical Cyber Security

IIT Madras · Elite + Silver

NPTEL Privacy and Security in Online Social Media
View Fullscreen

NPTEL Privacy and Security in Online Social Media

IIT Delhi · Elite + Silver

NPTEL Introduction to Industry 4.0 and IoT
View Fullscreen

NPTEL Introduction to Industry 4.0 and IoT

IIT Kharagpur · Elite + Silver

NPTEL Star Certificate
View Fullscreen

NPTEL Star Certificate

NPTEL star performer award

NPTEL Marksheet & Scores
View Fullscreen

NPTEL Marksheet & Scores

NPTEL consolidated credits

These certifications support practical learning and are presented alongside hands-on projects, labs, and security exercises. Click on any certificate card to inspect it fullscreen.

Featured Achievement

Engineering cybersecurity competition environments and deploying scalable, secure CTF infrastructure.

NYX CTF – Platform Development & Infrastructure Deployment

Self-Initiated offensive security infrastructure project

Designed and deployed a complete Capture The Flag (CTF) platform using Docker, CTFd, Nginx, Cloudflare, and Let's Encrypt. Planned and managed a multi-category cybersecurity competition while developing intentionally vulnerable web applications for hands-on offensive security practice. The project demonstrates practical experience in Linux administration, containerization, networking, web application security, and secure infrastructure deployment.

Skills & Technologies Used

DockerLinuxCTFdNginxCloudflareLet's EncryptPythonFlaskSQLiteNetworkingDocker ComposeReverse ProxySSL/TLSWeb Application SecurityOffensive Security

Key Project Highlights

  • Planned and organized a 16-challenge CTF covering Web Exploitation, Forensics, OSINT, Reverse Engineering, Steganography, and Miscellaneous categories.
  • Deployed and configured the CTFd platform using Docker containers on a Linux VPS.
  • Configured Nginx as a reverse proxy with HTTPS using Let's Encrypt and Cloudflare DNS.
  • Built intentionally vulnerable web applications featuring IDOR and SQL Injection vulnerabilities for realistic penetration testing practice.
  • Implemented challenge isolation using Docker, firewall configuration, automated maintenance, and SSL certificate management.
  • Designed the infrastructure to support 300+ participants while ensuring reliability and scalability.

This project significantly strengthened my practical understanding of offensive security by combining attack simulation with real-world infrastructure deployment. I gained hands-on experience in Linux server administration, Docker containerization, networking, reverse proxy configuration, SSL/TLS deployment, and web application security. Developing vulnerable applications also deepened my understanding of common web vulnerabilities such as IDOR and SQL Injection, how attackers exploit them, and how secure environments should be designed and maintained.

Platform Interfaces & Event Photos

Official CTF Event Poster
Click to enlarge

Official CTF Event Poster

Platform Web Landing Interface
Click to enlarge

Platform Web Landing Interface

Real-time Leaderboard & Scores
Click to enlarge

Real-time Leaderboard & Scores

Participant Metrics & Stats
Click to enlarge

Participant Metrics & Stats

CTF Core Infrastructure Team
Click to enlarge

CTF Core Infrastructure Team

Cyberfest '26 Event Group Photo
Click to enlarge

Cyberfest '26 Event Group Photo

Contact

Let's discuss security, research, or opportunities.

Direct Info

Feel free to get in touch directly or view my professional profiles.

Reach Out

Got a query, research proposal, or just want to connect? Send a message directly.