About Me

Expertise on technology management, medical cyber security, and site reliability engineering. Solid foundation on the principles of security, distributed systems, and software engineering supporting large scale distributed systems in telecom, software, biomedical, university, healthcare, and the military. I double majored in computer science and geographic information science from graduate school at Southern Illinois University, Carbondale. A former major of Nepalese Army and a military fellow at Nanjing university of science and technology, a recipient of a self-petitioned National Interest Waiver (NIW) green card. (<1% of green card recipients with a master's degree) and a naturalized US citizen. I taught cyber warfare in Nepalese Army Command and staff College and was a UN military peacekeeper in ONUB mission in Burundi.

I mentor on cyber security, Nepal, computer science, immigration, mental health, and higher education. I am interested in global affairs and south-Asia politics and hiking in the Himalayas. I have published more than twenty articles and whitepapers in cyber security, privacy and digital transformation and a book, The Hope (available in Amazon) - https://tinyurl.com/2aw948np

My industry experience coupled with a graduate degree in computer science & Advanced Computer Security from Stanford University and (ongoing) embedded system engineering certificate from UCSD:
► FDA Design Controls - FDA 21 CFR Part 820.30 for Cybersecurity.
► US FDA Quality System Regulations
► Enforcing FDA cyber-security post market/premarket guidance's for biomedical devices.
► Develop a cyber security strategy, quality plans, SOP, WI.
► Corrective Action and Preventive Action (CAPA)
► Cyber security frameworks (CIS Top 20, NIST, ISO 2700/27001, Kill Chain, Diamond etc)
► Threat Modeling (DFD, STRIDE, Attack tree, OWASP, Kill Chain, PASTA)
► Security Architecture, Code review - static and dynamic scanning
► Product security engineering (Threat modeling, static/dynamic scanning, vulnerability & pentest)
► Develop Key Security/Risk Indicators (KS/RI) and Risk Assessment
► Security Root Cause Analysis.
►Security and Operations Incidence response & complaint Investigations
► Privacy, Audit and Compliance (PCI, SOX, HIPAA,HITECH,FDA,GDPR, DOD STIG)