Open to opportunities

jeffery adhikari

@jefferyadhikari

Security Research Analyst focused on cybersecurity, GRC, and SOC 2 compliance through risk assessment and vulnerability reporting.

Nepal

Message

What I'm looking for

I’m looking for a security team role that blends security research with GRC and SOC 2 work—where I can perform risk assessments, map controls, and support incident-ready log analysis with strong documentation.

I’m a computer science graduate with practical experience across cybersecurity research, GRC, and SOC 2 compliance. I focus on turning findings into clear documentation—so risk is understood, prioritized, and actionable.

In my GRC apprenticeship, I performed internal audits and risk assessments, supported third-party risk management, and mapped NIST controls to align ISO 27001 with other security frameworks. I built hands-on experience with ISO 27001, 27017/18, 31000, and 42001, strengthening my compliance reporting and control-mapping workflow.

As a freelance bug bounty hunter, I identified and responsibly disclosed vulnerabilities such as XSS, authentication issues, and misconfigurations. I bring strong application security intuition—covering attack vectors, risk impact, and incident-response readiness—supported by SIEM fundamentals and log analysis exposure.

Experience

Work history, roles, and key accomplishments

GRC Apprenticeship

Code Rush

Dec 2025 - Mar 2026 (3 months)

Performed internal audits and risk assessments, documenting findings and reporting results. Mapped NIST controls to ISO 27001 and supported security questionnaires and third-party risk management (TPRM/vendor risk).

GRC ISO 27001 NIST Control Mapping Risk Assessment Internal Audit Third Party Risk Management Security Questionnaires

Bug Bounty Hunter

YesWeHack, HackerOne, Bugv

Jan 2021 - Jan 2024 (3 years)

Identified and reported vulnerabilities including XSS, authentication issues, and misconfigurations. Assessed security risk, documented findings for responsible disclosure, and applied application security and attack-vector analysis.

Vulnerability Assessment Application Security XSS Authentication Risk Analysis Responsible Disclosure Log Findings Documentation Attack Vectors