Open to research collaborations

Security Analyst/Engineer

Security Analyst and SOC-focused cybersecurity professional with experience in security monitoring, alert triage, incident investigation, vulnerability management, and cloud/network security. Hands-on with SIEM platforms (Splunk, Wazuh, Datadog), log analysis, endpoint and network forensics, and third-party risk assessments in enterprise environments.

View Projects Download CV Publications

Currently exploring: Incident response • AI in cybersecurity • Network Security

~/yaman/cyber/server ▶ tail -f skills.log

$ whoami

> Yaman Shrestha — Cybersecurity Researcher

$ contact

> email: yamanshrestha08@gmail.com

> github: github.com/yamanshrestha

> linkedin: linkedin.com/in/yaman-shrestha

Areas of Interest

My work sits at the intersection of security operations and AI. I prototype multi‑LLM routing for threat intel, evaluate detection under adversarial drift, and build reproducible pipelines.

Threat Intelligence

Automated IOC extraction, entity linking, and confidence scoring across noisy sources.

MITRE ATT&CKSTIX/TAXII

LLMs for Netework Security

IoT fingerprinting, host identification, fine-tuning LLaMA models, explainable AI, ABC optimization

FinetuningAI Agents

Network Security and Forensics

Packet analysis with Wireshark, Tcpdump, Tshark, Scapy

Blue‑teamingRobustness

Cybersecurity Policy & Risk

NIST Frameworks, ICS policies, CAIQ and SIG Questionnaires

NISTPICERL

Featured Projects

A few builds and experiments. Swap the placeholders with your repos and live demos.

SIEM + SOAR Mini-XDR (Cloud, Endpoint & Network Detection Platform)

PythonSIEMNetwork

GitHub Demo

Local Risk Analyzer – Vulnerability Detection Tool

PythonDetection

GitHub

Digital Signature Tool

RSAECC

GitHub Thesis

Publications

[2025] Automated IoT Fingerprinting with LLMs: Harnessing Explainable AI and Artificial Bee Colony Optimization San Francisco, CA.

Y Shrestha, K Ansari, A Aksoy PDF • IEEE

[2025]Automated Host Identification Using SSL/TLS Traffic with SHAP and Artificial Bee ColonyWorkshop.

A Aksoy, S Varma, K Ansari, Y Shrestha PDF • IEEE

Skills

Threat Intel & SOC

Threat IntelIncident ResponseSIEM (Datadog, ELK, Splunk)ATT&CKCyber Kill Chain

Network Security

WiresharkScapyARP/DNSPacket ManipulationEvaluation

AI & LLMs

LLaMA fine-tuningIoT fingerprintingExplainable AIRAGclassification

Languages

PythonBash

Experience & Awards

Research Assistant - Security Focused — University of Central Missouri / NetML Lab (Aug 2024 — Dec 2025)
research on network security, including TCP/IP packet analysis, IoT fingerprinting, incident detection techniques aligned with SOC practices.

Security Analyst — Syvar Technology (Apr 2022 - Dec 2023)
Conducted vulnerability scanning and risk assessments to identify and remediate security gaps across client infrastructures.
Collaborated with developers in an Agile environment to implement secure coding practices and perform code reviews aligned with OWASP Top 10.
Designed and delivered internal training on incident response, secure SDLC, and security policy compliance, improving team awareness and security maturity.

Security Research Analyst— SecurityPal Inc.(2024)
Conducted over 200 third-party risk assessment questionnaires for Fortune 500 companies, ensuring compliance with ISO 27001, NIST CSF, GDPR, HIPAA, PCI-DSS, and CCPA standards.

$root@yaman