Headline

Cybersecurity & QA Engineer

Location

Kathmandu

Work experience

VAPT & QA Engineer at Cinemaghar, 361 Degree Media Pvt. Ltd., Jan 2026 - Apr 2026 · 4 mos, Performed penetration testing and vulnerability assessments on REST API endpoints, uncovering 5+ critical vulnerabilities in registration and authentication flows actively exploited by real-world attackers. Led end-to-end incident response for active DDoS and bot-driven account farming attacks — reducing daily attack volume from 700+ to under 50 through attacker profiling, log forensics, and IP/​ASN threat correlation. Assessed and exploited CAPTCHA mechanisms (reCAPTCHA v2) to demonstrate bypass viability via CAPTCHA farms and ML solvers, recommending and validating migration to more resilient alternatives. Profiled threat actor origins across 30+ high-risk countries using AbuseIPDB and IPQualityScore, building geo-threat intelligence references to support WAF rules and IP reputation filtering. Designed and enforced layered API security controls including Redis-based rate limiting, OTP-gated flows, VoIP/​disposable identity blocking, device fingerprinting, and honeypot-based bot detection.

Information Technology Intern at Islington College, ING Group, Nov 2024 - Feb 2025 · 4 mos, Provided technical support and troubleshooting for network connectivity, hardware, and software issues across a college environment. Maintained and managed an inventory of 100+ IT assets using internal tracking systems, ensuring accurate records and timely issue resolution. Documented recurring system issues and contributed to an internal knowledge base, reducing repeat resolution time for common faults. Assisted in the physical setup and maintenance of network infrastructure including cabling, punching, and device configuration.

Education

Bachelor of Science, Computer Networking and IT Security, Islington College