// Senior Cybersecurity Engineer
Kailash Bohara
Cybersecurity professional with 9+ years of experience securing modern applications and enterprise infrastructure across cloud platforms, containerized environments, and DevOps ecosystems. Expertise spans security architecture, cloud security, risk assessment, threat hunting, penetration testing, vulnerability management, and threat modeling. Strong experience in embedding security within CI/CD pipelines, container security monitoring, DevSecOps practices, and incident response to proactively detect and mitigate emerging threats. Passionate about building resilient, scalable, and secure infrastructure while actively mentoring and contributing to the cybersecurity community through OWASP Kathmandu and Pentester Nepal.
01 / about
About Me
Professional Profile & Overview
Who I Am
About Kailash Bohara
Cybersecurity Engineer with 9+ years of experience designing and implementing secure systems across applications, networks, cloud, and containerized environments. My expertise includes security architecture, Zero Trust design, penetration testing (web, mobile, API, and network), application security, vulnerability management, and DevSecOps pipeline security.
Hands-on experience enhancing enterprise security through improvements in SOC, MDR, DLP, cloud security, and threat detection, as well as automating security processes to streamline operations and improve resilience. My work supports organizations in achieving and maintaining compliance with standards such as SOC 2, HITRUST, and ISO 27001 by strengthening audit readiness, risk management, and operational security practices.
Core Skills
- Security Architecture & Zero Trust Design
- Identity & Access Management
- Penetration Testing (Web, API, Network, Mobile)
- Vulnerability Assessment & Vulnerability Management
- Application Security & Secure SDLC
- Cloud Security (AWS, GCP, Azure Hardening & Architecture)
- DevSecOps & CI/CD Security Integration
- Container & Kubernetes Security Monitoring
- Network Security & Secure Infrastructure Design
- Risk Assessment & Threat Modeling
- Compliance & Security Gap Assessment (ISO 27001, SOC2, HIPAA, HITRUST)
- Secure Code Review & Developer Security Training
- Security Monitoring & Detection Engineering (SIEM/SOAR)
Helped Secure
Identified and responsibly disclosed vulnerabilities across major platforms.
Google
Facebook
AWS
Adobe
Dell
Zoho
Microsoft02 / hacktivities
Hacktivities
Bug bounties, CVEs, talks, publications, and trainings
03 / experience
Experience
Professional Work History
04 / talks
Talks & Presentations
Conference talks, workshops, and community events
05 / certifications
Certifications
Professional Credentials & Qualifications
06 / research
CVE Disclosures
Security Vulnerabilities Responsibly Disclosed