kiran@parajuli:~$
$ cat ~/resume.md
↓ download pdf

Kiran Parajuli

Cybersecurity Engineer | Security Operations | CEO & Technology Leader
Biratnagar, Nepalparajulikiran.com.npEterosoft Technologies Pvt. Ltd.kiranparajuli321@gmail.com

Professional summary

Cybersecurity professional and technology leader with interests and experience spanning Security Operations Center (SOC) operations, security engineering, threat detection, incident response, risk management, and secure software development. Serving as CEO and Security Engineer at Eterosoft Technologies, combining technical security practices with technology leadership, business operations, and software engineering.

Focused on strengthening organizational security, improving threat visibility, developing security-aware teams, and implementing practical security controls. Interested in security governance, cloud security, vulnerability assessment, and continuous professional development.

Professional experience

Chief Executive Officer (CEO) & Security EngineerAdd start date — Present
Eterosoft Technologies Pvt. Ltd. · Biratnagar, Nepal
  • Lead technology strategy, project delivery, and business operations.
  • Contribute to security engineering, application security, and secure software development practices.
  • Support security assessments, vulnerability identification, and remediation planning.
  • Promote cybersecurity awareness and secure technology practices among teams and clients.
  • Coordinate technical teams and contribute to software architecture, deployment, and infrastructure decisions.
  • Integrate security considerations into application development and technology projects.
  • Support security governance, risk assessment, compliance planning, and operational resilience.
SOC Analyst — Tier 2Add dates
Security Operations Center (SOC) · add organization
  • Investigate and triage security alerts, escalating confirmed or complex incidents when necessary.
  • Analyze security events, logs, indicators of compromise, and suspicious activity.
  • Support incident response, threat hunting, root-cause analysis, and containment recommendations.
  • Correlate security telemetry to investigate potentially malicious behavior.
  • Assist with detection-rule tuning, false-positive reduction, and incident documentation.
  • Collaborate with security and IT teams to improve monitoring coverage and response procedures.

Education

Bachelor of Computer Science
Taylor's University · Malaysia
IIMS College
Add program and dates

Certifications & professional development

  • Certified Governance, Risk and Compliance (CGRC)
  • Systems Security Certified Practitioner (SSCP)
  • Cloud Security Essentials (CSE) — EC-Council
  • Certified Cybersecurity Educator Professional (CCEP)
  • Google Cybersecurity Professional Certificate
  • Google Foundations of Cybersecurity

Technical skills

Security Operations
SOC monitoring and alert triageSecurity event analysis and investigationIncident response and escalationThreat intelligence and IOC analysisDetection engineering fundamentalsMITRE ATT&CK framework
Security Engineering
Vulnerability assessment and remediationWeb application securityOWASP Top 10Secure software development lifecycle (SSDLC)Authentication and access controlSecurity hardening and configuration review
Governance, Risk & Compliance
Security risk assessmentsSecurity policies and control implementationISO/IEC 27001 conceptsNIST Cybersecurity FrameworkSecurity awareness and incident documentationBusiness continuity and operational resilience
Cloud & Infrastructure Security
Identity and access management (IAM)Cloud security fundamentalsNetwork security and segmentationEndpoint securityLogging, monitoring and access auditingBackup and recovery fundamentals

Security tools & technologies

Network analysis: Wireshark, Nmap, tcpdump
SIEM & SOC: Splunk, Microsoft Sentinel, Elastic Security, Wazuh
Endpoint detection: Microsoft Defender for Endpoint, CrowdStrike Falcon
Threat intelligence: VirusTotal, AbuseIPDB, MITRE ATT&CK
Web security testing: Burp Suite, OWASP ZAP, Nikto
Vulnerability management: Nessus, Greenbone/OpenVAS
Digital forensics: Autopsy, Volatility
Operating systems: Linux, Windows, Kali Linux
Cloud security: Microsoft Entra ID, AWS IAM, Microsoft Defender for Cloud
Development & automation: Python, Bash, PowerShell, Git, Docker

Leadership & communication

Technology strategy and project leadershipTechnical team coordinationCybersecurity awareness and educationTechnical documentation and reportingClient communication and requirements analysisSecurity-focused engineering practices

Languages

Nepali · English

Professional interests

Security Engineering · Threat Detection · Incident Response · Cloud Security · Application Security · Governance, Risk & Compliance · Cybersecurity Education · Secure Software Architecture

References available upon request.