Skip to content
Arjun Giri

Experience

Roles and the work behind them.

  1. Jan 2025 to Present

    Security Analyst

    Nepal Clearing House Ltd. (NCHL)

    Kathmandu, Nepal

    • Conduct vulnerability assessment and penetration testing on internal applications and on systems used by vendors and client institutions, safeguarding critical national payment infrastructure.
    • Test mobile applications, database systems, APIs, and thick and thin clients, and help remediate findings across diverse technology stacks.
    • Support PCI DSS certification through segmentation penetration testing and internal vulnerability assessments, alongside compliance documentation.
    • Assist the ISO team on information security management, supporting alignment with PCI DSS v4.0.1 and ISO 27001.
    • Validate findings from external VAPT engagements and work with the concerned teams through to timely closure.
    • Develop internal tools and automation scripts that streamline assessment workflows.
    • Research emerging threats, attack techniques, and vulnerability trends to strengthen proactive defense.

  2. Oct 2024 to Jan 2025

    Cybersecurity Associate

    Green Tick Nepal Pvt. Ltd.

    Gyaneswor, Kathmandu

    • Executed vulnerability assessments and penetration tests across web, iOS and Android, desktop applications, and network infrastructure.
    • Engineered 100+ custom detection rules using Sigma and ElastAlert, aligned with MITRE ATT&CK and supporting SOC 2 Type 2 and ISO 27001.
    • Bypassed enterprise security controls during assessments, including AMSI, Windows SmartScreen, ASLR, WAF configurations, XDR solutions, and next generation antivirus.
    • Authored technical reports covering critical findings, risk assessments, and remediation strategies.
    • Ran daily security briefings, patch validation, and vulnerability revalidation with clients.
    • Configured enterprise switches, routers, firewalls, and access points with centralized log aggregation for real time monitoring.

    Sigma / ElastAlert / Wazuh / MISP / Kibana / OpenSearch / Cortex / Microsoft XDR

  3. June 2024 to Oct 2024

    Cybersecurity Intern

    Green Tick Nepal Pvt. Ltd.

    Gyaneswor, Kathmandu

    • Researched network exploitation techniques, hash capturing methods, and attack vector analysis.
    • Practiced offensive fundamentals including custom shellcode development, AMSI bypass techniques, and Windows and Linux privilege escalation.
    • Identified and exploited web vulnerabilities including SQL injection, command injection, XSS, path traversal, IDOR, and CSRF.
    • Produced vulnerability assessment reports alongside senior team members.
    • Researched dark web operations and emerging threats, contributing to threat intelligence capabilities.

    Burp Suite / Nmap / Responder / Metasploit / Wireshark

arjun-giri.com.np