About

About

I’m a Cybersecurity Engineer with over 4 years of experience across offensive and defensive security operations. I specialize in threat detection, incident response, network security, and SIEM optimization. I have supported large-scale SOC deployment and security monitoring initiatives, enhancing system reliability and defense capabilities.

What I Do

  • Support and operate SIEM, SOAR, UEBA, and EDR solutions
  • Perform log analysis, detection tuning, and incident triage
  • Collaborate with engineering teams to fix security bugs and product vulnerabilities
  • Translate complex security problems into clear, actionable guidance

Current Focus

I’m currently pursuing a Master’s degree in Cybersecurity, while deepening my skills in:

  • Detection engineering
  • Threat hunting
  • Blue Team automation
  • Linux & infrastructure security

Experience

LogPoint | Denmark-Based

📍 Lalitpur, Nepal
Professional Trainee → Associate Solution Engineer → Solutions Engineer - July 2021 – Aug 2025 (Full-time)

  • Assisted customers in creating and tuning numerous security workflows using SIEM, SOAR, UEBA, and EDR.
  • Identified, documented, and resolved 40+ critical bugs and security vulnerabilities in LogPoint products through Jira, contributing to major product enhancements.
  • Served as UEBA customer lead, handling server maintenance and seamless onboarding for 30+ clients.
  • Resolved 2500+ Zendesk tickets while maintaining customer satisfaction consistently above 90%.
  • Tuned performance parameters to reduce disk, memory, CPU, and network usage across distributed Linux environments, ensuring stable operations.
  • Restored 20+ LogPoint SIEM systems from GRUB rescue mode, preventing critical data loss.
  • Optimized Java service heap allocation, reducing LogPoint SIEM resource consumption by ~30%.
  • Resolved bottlenecks in search, indexing, and log ingestion pipelines, improving overall SIEM performance.
  • Assisted 100+ customers with setup, upgrades, and migration of Linux, SIEM, SOAR, and EDR solutions.
  • Created automation tools using Python and Bash to streamline Linux OS administration tasks.

Code Rush Nepal

📍 Lalitpur, Nepal
Cybersecurity Trainer - Mar 2024 – Aug 2024 (Part-time)

  • Delivered cybersecurity training and mentorship, enabling students to obtain CompTIA Network+, Linux+, and Security+ certifications.

CryptoGen Nepal

📍 Kathmandu, Nepal
Intern → Security Analyst - Sept 2020 – June 2021

  • Improved the security posture of 5 clients by conducting VAPT on web applications and network infrastructure.
  • Developed and shared detailed VAPT reports with risk analysis and remediation recommendations for clients.

Projects

ReconMaster | GitHub

Django Web Framework, Bash Scripting, Jinja2, PostgreSQL, Celery (Redis)

  • Built a Django-based reconnaissance platform that enumerates subdomains, endpoints, open ports, and technology stacks to accelerate the reconnaissance phase of penetration testing.
  • Implemented asynchronous scanning using Celery + Redis with PostgreSQL-backed task and results storage for scalable, parallel data collection.
  • Delivered findings through a compact Django-rendered frontend for quick analyst review and export.

RSS Feed Collector | GitHub

Python

  • Aggregated and parsed open-source threat intelligence RSS feeds.
  • Automated feed cleanup to maintain data freshness and optimize storage.
  • Integrated with SIEM systems to enrich logs with real-time cyber threat intelligence.

Certifications

This website serves as my technical journal - a place where I document what I learn, build, break, and defend.