07/30/2026 updated
RA
100 % available
Director of Cybersecurity & DevSecOps | CISSP | Cloud Security Expert
Kathmandu, Nepal
Worldwide
Master of Science, Information Security and Digital Forensics - University of East LondonAbout me
CISSP-certified Cyber Security leader with 4+ years securing multi-cloud environments. MSc in InfoSec (Distinction). Expert in cloud architecture, security automation, compliance (ISO 27001/SOC 2), and AI-driven security. Passionate about building secure, scalable, cost-efficient cloud solutions.
Cisco Certified Security ProfessionalCertified Information Security ManagerCloud ComputingCloud Computing SecurityCloud EngineeringVirtual Private ServersCloud TestingData GovernanceDevOpsInternet Protocol Security (IP SEC)Cloud ServicesSecurity Content Automation ProtocolCloud Platform SystemCloud MonitoringSoftware Security
Cloud Security & Identity
Expertise in multi-cloud security operations across AWS, GCP, and Azure, including Zero Trust Architecture, CSPM, Microsoft Defender/Entra ID, IDS/IPS, and WAF to protect enterprise environments.
AI & Threat Intelligence
Proficiency in Agentic AI, Microsoft Sentinel, GCP SecOps, MITRE ATT&CK, CVE Analysis, CTI Pipelines, and Cyber Kill Chain for advanced threat detection and security automation.
Data Protection & Compliance
Deep knowledge of Microsoft Purview, ISO 27001, SOC 2, ISO 42001, Risk Management, and Vendor Assessment to ensure regulatory compliance and data governance across organizations.
Vulnerability Assessment & Application Security
Hands-on experience with Nessus, Burp Suite, OWASP, Postman, SAST/DAST, CI/CD Security, and Secrets Management to identify and remediate vulnerabilities across infrastructure and applications.
Tools & Scripting
Practical skills in Python, Bash, SQL, Linux, GitHub, PowerShell, Terraform, and Docker for automating security workflows and managing infrastructure as code.
DevSecOps Framework
Experience embedding security into CI/CD pipelines, conducting SAST/DAST testing, secrets detection, and penetration testing workflows within GitHub-based development environments.
Incident Response & Security Operations
Proven ability to lead incident response planning, triage and remediate security incidents across multi-cloud environments, maintaining average response times under 4 hours.
Governance & Risk Management
Establishment of governance frameworks and risk management strategies to oversee multi-cloud environments, ensuring compliance with industry standards and proactive threat mitigation.
Expertise in multi-cloud security operations across AWS, GCP, and Azure, including Zero Trust Architecture, CSPM, Microsoft Defender/Entra ID, IDS/IPS, and WAF to protect enterprise environments.
AI & Threat Intelligence
Proficiency in Agentic AI, Microsoft Sentinel, GCP SecOps, MITRE ATT&CK, CVE Analysis, CTI Pipelines, and Cyber Kill Chain for advanced threat detection and security automation.
Data Protection & Compliance
Deep knowledge of Microsoft Purview, ISO 27001, SOC 2, ISO 42001, Risk Management, and Vendor Assessment to ensure regulatory compliance and data governance across organizations.
Vulnerability Assessment & Application Security
Hands-on experience with Nessus, Burp Suite, OWASP, Postman, SAST/DAST, CI/CD Security, and Secrets Management to identify and remediate vulnerabilities across infrastructure and applications.
Tools & Scripting
Practical skills in Python, Bash, SQL, Linux, GitHub, PowerShell, Terraform, and Docker for automating security workflows and managing infrastructure as code.
DevSecOps Framework
Experience embedding security into CI/CD pipelines, conducting SAST/DAST testing, secrets detection, and penetration testing workflows within GitHub-based development environments.
Incident Response & Security Operations
Proven ability to lead incident response planning, triage and remediate security incidents across multi-cloud environments, maintaining average response times under 4 hours.
Governance & Risk Management
Establishment of governance frameworks and risk management strategies to oversee multi-cloud environments, ensuring compliance with industry standards and proactive threat mitigation.
Experience
Professional experience0 - 5 years
Freelancer since2023
Languages
EnglishFluent
Project history
Defining and executing the corporate cybersecurity strategy, leading company-wide AI implementation with AI agents for security automation, operating Microsoft 365 security using Entra ID and Defender, establishing governance frameworks for multi-cloud environments, and leading incident response planning and cloud security architecture reviews.
Directing IT audit cycles and compliance initiatives for ISO 27001, ISO 42001, SOC 2 Type II, and TX-RAMP. Managing multi-cloud security operations including SIEM-based threat detection, identity governance, and DLP. Conducting vulnerability and risk assessments across infrastructure, applications, and CI/CD pipelines. Delivering security awareness training and phishing simulation campaigns.
Certificates
CISSP
ISC22025
GCP Professional Security Engineer
Google2025
GCP Professional SecOps Engineer
Google2025
SecurityX
CompTIA2025
Security+
CompTIA2025
CEH Practical
EC-Council2022