Hi, I'm Kailash_

Senior Cybersecurity Engineer

Cybersecurity professional with 9+ years of experience securing modern applications and enterprise infrastructure across cloud platforms, containerized environments, and DevOps ecosystems. Expertise spans security architecture, cloud security, risk assessment, threat hunting, penetration testing, vulnerability management, and threat modeling. Strong experience in embedding security within CI/CD pipelines, container security monitoring, DevSecOps practices, and incident response to proactively detect and mitigate emerging threats. Passionate about building resilient, scalable, and secure infrastructure while actively mentoring and contributing to the cybersecurity community through OWASP Kathmandu and Pentester Nepal.

kb@security

$ whoami

aboutme.md

$ cat role.txt

Senior Cybersecurity Engineer

$ █

9+ Years Experience

9 Certifications

5 CVE Disclosures

2 Communities Led

About

Who I am

Professional profile, skills, and organizations helped through responsible vulnerability disclosure.

About Kailash Bohara

Cybersecurity Engineer with 9+ years of experience designing and implementing secure systems across applications, networks, cloud, and containerized environments. My expertise includes security architecture, Zero Trust design, penetration testing (web, mobile, API, and network), application security, vulnerability management, cloud security and DevSecOps pipeline security.

Hands-on experience strengthening enterprise security through security operations, detection and response (SIEM/EDR), DLP, cloud security, and threat detection, as well as automating and integrating security into operational workflows. My work helps organizations achieve and maintain compliance with SOC 2, HITRUST, and ISO 27001 by improving audit readiness, risk management, and operational security controls.

Helped Secure

Helped secure Google, Facebook, Microsoft, AWS, Adobe, Adafruit, Alibaba, Toyota, Cloudinary, Dutch Government, OpenCart, MDaemon Webmail, Dell, United Nations, ManageEngine, GoDaddy, HP, and others by responsibly reporting security vulnerabilities in their systems.

Google

Facebook

Microsoft

AWS

Adobe

Adafruit

Alibaba

Toyota

Cloudinary

Dutch Government

OpenCart

MDaemon

Dell

United Nations

ManageEngine

GoDaddy

Skills & Expertise

Offensive Security

Penetration Testing (Web, API, Network, Mobile)
Vulnerability Assessment & Management
Secure Code Review
Threat Hunting

Cloud & DevSecOps

Cloud Security (AWS, GCP, Azure)
DevSecOps & CI/CD Security
Container & Kubernetes Security
Security Monitoring (SIEM/SOAR)

Architecture & Governance

Security Architecture & Zero Trust
Identity & Access Management
Risk Assessment & Threat Modeling
Compliance (ISO 27001, SOC 2, HITRUST, HIPAA)

Credentials

Experience & certifications

A decade of offensive and defensive security work, backed by industry credentials and trainings.

Experience

View all

2023 - Present

Senior Cybersecurity Engineer

Cedar Gate Technologies

Manage internal and external audits, vulnerability assessments, network/application penetration testing, and secure code review.
Analyze threat alerts from SIEM/EDR, Privilege Access Management (PAM), and Data Loss Prevention (DLP) tools.
Review and strengthen CI/CD pipelines, deployment configurations, and container security using SAST, DAST, and SCA scans.
Conduct secure code reviews, triage application security findings, and partner with development teams on remediations.
Perform cloud security posture assessments and support CSPM by monitoring, triaging, and remediating cloud findings.
Conduct red team assessments, proactive threat hunting, and external attack surface evaluations.
Manage container security across images, registries, and runtime environments.
Implement security controls for ISO 27001, HIPAA, HITRUST, and SOC 2 compliance.
Configure and fine-tune security controls to support zero-trust implementation.

2018 - 2023

Senior Penetration Tester

Eminence Ways Pvt. Ltd.

Perform Information Systems Audit and Vulnerability Assessment of network and application systems.
Conduct SAST, DAST, and SCA scans aligned with OWASP Top 10 and SANS Top 25 standards.
Execute penetration testing for web applications, APIs, networks, thick/thin clients, and Android/iOS mobile apps.
Develop CTF challenges and deliver security training for clients.
Perform red team assessments and threat hunting.

2022 - Present

Chapter Leader

OWASP Kathmandu

OWASP Kathmandu is a non-profit cybersecurity community dedicated to strengthening information security awareness and building a collaborative security ecosystem in Nepal. The chapter organizes regular cybersecurity meetups, Capture-the-Flag (CTF) events, and live hacking competitions to promote learning, knowledge sharing, and hands-on security skills