CYBERSECURITY · DIGITAL RISK · DEFENSE

Never trust.
Always verify.

I’m David Budha Magar — a cybersecurity professional turning threats into stronger security through digital risk monitoring, penetration testing, and practical security operations.

02+ YEARS IN SECURITYNEPAL BASED IN
RISK INTELLIGENCE 01
〰 SIGNAL ANALYSIS ACTIVE
A NOTE TO VISITORSSTAY CURIOUS. STAY SECURE.
PROFESSIONAL FOCUS
01 Digital risk monitoring
02 Threat analysis
03 Web application security
04 Security operations
01 / ABOUT

Security work with
context and purpose.

Good security starts with understanding what matters: the people, platforms, and risks that shape an organization’s digital footprint.

My work spans digital risk monitoring, threat analysis, and hands-on security testing. I combine investigative thinking with technical practice to help identify suspicious activity, assess exposure, and support clear, actionable response.

From monitoring impersonation and abuse to exploring web application defenses, I aim to make security work measured, useful, and grounded in evidence.

A little more about my experience ↗
02 / EXPERIENCE

Learning through
real-world practice.

A timeline of roles across digital risk operations and application security.

MAR 2025 — PRESENT

Digital Risk Monitoring & Enforcement

Vairav Technology · Nepal
01

Supporting digital risk monitoring and response across online platforms, with a focus on identifying impersonation, suspicious accounts, and emerging threat patterns.

  • Investigate fraudulent and suspicious profiles and document findings.
  • Coordinate enforcement and takedown workflows with relevant teams.
  • Identify behavioural patterns and support digital threat response.
  • Support and coordinate interns within monitoring operations.
Digital riskThreat analysisOperations
JUN 2024 — DEC 2025

SMET Intern

Vairav Technology · Nepal
02

Built a foundation in intelligence-led digital monitoring, social media research, and abuse response.

  • Developed intelligence-based monitoring profiles and collected threat intelligence.
  • Identified fake or malicious profiles and supported abuse reporting.
  • Assisted with takedown coordination, trend analysis, and reporting automation.
OSINTMonitoringReporting
DEC 2024 — FEB 2025

Security Specialist Intern

Mero Solutions · Nepal
03

Explored application security through structured testing, vulnerability identification, and practical risk assessment.

  • Tested web applications and documented potential vulnerabilities.
  • Contributed to security framework development and risk assessment.
  • Prepared practical security recommendations for review.
Web securityAssessmentRisk
↗
TEAM & OPERATIONS

Supporting digital risk operations while coordinating the work of junior team members and interns.

03 / SELECTED WORK

Curiosity turned
into working ideas.

A selection of academic and practical projects exploring detection, application security, and risk.

APPLICATION / AUTOMATION
url_extractor.py
01 def extract_urls(source):02   links = find_links(source)03   return sorted(set(links))04 # clean, deduplicated output
LINK EXTRACTIONPYTHON
02 — PYTHON TOOLINGGITHUB PROJECT

URL Extractor

A Python utility that extracts URLs from text or documents, removes duplicates, sorts links, and exports clean lists in multiple formats.

PythonAutomationData handling
View on GitHub ↗
SOCIAL PLATFORM / REPORTING
IG
REVIEWREPORTSAFETYTOOLS
CONTENT REPORTINGBROWSER EXTENSION
03 — BROWSER TOOLINGGITHUB PROJECT

Instagram Reporting Extension

A browser extension project for reporting content on Instagram. Review the repository for intended workflows and usage details.

JavaScriptBrowser ExtensionReporting workflow
View on GitHub ↗
SOCIAL PLATFORM / REPORTING
FB
BROWSER EXTENSION
CONTENT REPORTINGJAVASCRIPT
04 — BROWSER TOOLINGGITHUB PROJECT

Facebook Auto-Reporting Extensions

A browser extension project for reporting content on Facebook. See the repository for implementation details and intended use.

JavaScriptBrowser ExtensionReporting workflow
View on GitHub ↗
NETWORK / DETECTION
PROJECT REPOSITORYIDS / IPS
DETECTANALYZEALERTPREVENTREVIEW
WEB INTERFACEHTML
05 — NETWORK SECURITYGITHUB PROJECT

FYP — Intrusion Detection & Prevention

A final-year project repository described as IDS/IPS. Explore the source and documentation for implementation details.

IDS / IPSHTMLSecurity project
View on GitHub ↗
04 / EXPERTISE

Tools are useful.
Judgment matters more.

A practical toolkit developed through project work, study, and operational experience.

⌕
01

Offensive security

Testing and assessing systems with a focus on finding and communicating weaknesses.

Penetration testingWeb application securityVulnerability assessmentBurp Suite · Metasploit · Nmap
◉
02

Defensive security

Monitoring signals, investigating events, and supporting a measured response.

Threat detectionSIEM · IDSIncident analysisDigital risk monitoring
⌘
03

Networking

Understanding the protocols and controls that underpin connected environments.

TCP/IP · VLANRouting · FirewallVPNNetwork security
{ }
04

Programming

Using code to automate, investigate, and build security-focused projects.

PythonJava · SQLHTML · CSSAutomation
☁
05

Cloud

Foundational cloud operations and security concepts across AWS learning paths.

AWSCloud operationsCloud securityData center fundamentals
▣
06

Platforms

Working across common operating systems in security and networking contexts.

LinuxWindowsCommand-line workflowsNetwork tooling
05 / CREDENTIALS & EDUCATION

Built on a foundation
of continuous learning.

Formal study and professional learning that support my security practice.

PROFESSIONAL CREDENTIALS01 — 06
eJPT

Junior Penetration Tester

INE · eLearnSecurity

PENETRATION TESTING
SE

Certified Social Engineering Defense Practitioner

Professional credential

DEFENSE
CC

Certified Cybersecurity Educator Professional

Professional credential

EDUCATION
aws

AWS Academy Data Center Technician

AWS Academy

CLOUD
aws

AWS Academy Cloud Foundations

AWS Academy

CLOUD
aws

AWS Academy Cloud Security Foundations

AWS Academy

CLOUD SECURITY

Credential years and verification links can be added when confirmed. No credential IDs are displayed here.

ACADEMIC BACKGROUND
2022 — 2025
◎

BSc (Hons) Computer Networking and IT Security

London Metropolitan University

Delivered through Islington College, Nepal

UPPER SECOND CLASS HONOURS66.67%
RELEVANT AREAS

Networking · Cybersecurity · Cloud · Digital security · Intrusion detection · Web security

PREVIOUS EDUCATION

HSEB (+2) — Mount View English Boarding School, Dang

SLC — Annapurna Secondary Boarding School, Dang

SECURITY-MINDED BY DESIGN

Security is a process,
not a promise.

I believe in layered controls, thoughtful disclosure, and continuous improvement. No connected system can be guaranteed completely secure; good practice means reviewing assumptions and learning from change.

Security & disclosure ↗
⌘
A SAFE PLACE TO PRACTICE

Think like a defender.
Play the Security Arcade.

Ten short, fictional challenges about spotting risk and choosing safer controls. Everything runs locally in your browser.

Enter the arcade ↗
06 / CONTACT

Let’s make the
digital world safer.

Have a security opportunity, project, or thoughtful question? I’d be glad to hear from you.

Start a conversation ↗
27°42' N
85°19' E
OPEN TO
MEANINGFUL WORK
PROJECT DETAILS