Senior Cybersecurity Engineer

Cedar Gate Technologies

• Manage internal and external audits, vulnerability assessments, network/application penetration testing, and secure code review.
• Analyze threat alerts from SIEM/EDR, Privilege Access Management (PAM), and Data Loss Prevention (DLP) tools.
• Review and strengthen CI/CD pipelines, deployment configurations, and container security using SAST, DAST, and SCA scans.
• Conduct secure code reviews, triage application security findings, and partner with development teams on remediations.
• Perform cloud security posture assessments and support CSPM by monitoring, triaging, and remediating cloud findings.
• Conduct red team assessments, proactive threat hunting, and external attack surface evaluations.
• Manage container security across images, registries, and runtime environments.
• Implement security controls for ISO 27001, HIPAA, HITRUST, and SOC 2 compliance.
• Configure and fine-tune security controls to support zero-trust implementation.

Senior Penetration Tester

Eminence Ways Pvt. Ltd.

• Perform Information Systems Audit and Vulnerability Assessment of network and application systems.
• Conduct SAST, DAST, and SCA scans aligned with OWASP Top 10 and SANS Top 25 standards.
• Execute penetration testing for web applications, APIs, networks, thick/thin clients, and Android/iOS mobile apps.
• Develop CTF challenges and deliver security training for clients.
• Perform red team assessments and threat hunting.

Chapter Leader

OWASP Kathmandu

OWASP Kathmandu is a non-profit cybersecurity community dedicated to strengthening information security awareness and building a collaborative security ecosystem in Nepal. The chapter organizes regular cybersecurity meetups, Capture-the-Flag (CTF) events, and live hacking competitions to promote learning, knowledge sharing, and hands-on security skills