About me
14+ years across offence, defence and audit.
Background
How I got here.
Nirmal DahalCybersecurity consultant, co-founder of CryptoGen Nepal
I started in security in 2012, working independently. In 2016 I took my first full-time role as a web application penetration tester, mostly testing banks, payment providers and payment system operators. That work taught me how real systems fail, and how to explain it to the people who have to fix them.
In 2019 I co-founded CryptoGen Nepal, where I lead the technical side: penetration testing, security operations and information system audits.
Outside client work I teach practical security at Softwarica College, help run Pentester Nepal, and speak at conferences, universities and government sessions. I spent 2021 to 2024 as a volunteer leader of the OWASP Kathmandu chapter.
Education
Still studying.
Master of Computer ScienceLincoln University College · 2025 to 2027 (in progress)
More about me
The record, page by page.
- HacktivitiesThe moments that stand out.15 highlights
- ExperienceRoles, newest first.5 roles
- ExpertiseSkills by domain, each with its proof.6 areas of expertise
- CertificationsCredentials across offence, defence and audit.18 certifications
- RecognitionAwards, rankings and credited research.7 entries
- RecommendationsWhat people I've worked with say.7 recommendations
- CommunityLeadership, open source and teaching.10 roles and contributions
- TravelTrips abroad, for work and for the love of it.7 trips abroad
Quick answers
Questions people ask.
- Who is Nirmal Dahal?
- I'm a cybersecurity consultant and co-founder of CryptoGen Nepal. I've worked in security since 2012, independently at first and, from 2016, as a web application penetration tester.
- Does Nirmal Dahal work with clients remotely?
- Yes. I'm based in Kathmandu, Nepal (UTC+05:45) and work with teams remotely; on-site work can be arranged per engagement.
- What services does Nirmal Dahal offer?
- Penetration testing, Security operations, GRC advisory, Agentic AI security and Training and speaking. Each one has its own page under Services.
- Does Nirmal Dahal speak at conferences and run trainings?
- Yes. I've delivered 36 talks, trainings, panels and guest lectures, including PyCon JP 2024 in Tokyo. You can invite me through the contact page.
- What certifications does Nirmal Dahal hold?
- 18 certifications across offensive security, defence and audit, including ISO/IEC 27001 Lead Auditor and CEH Master, listed with their issuers on the Certifications page.
- How do I hire or contact Nirmal Dahal?
- Book a 30-minute call or send a message at https://nirmaldahal.com.np/contact.
Let's scope it together.
Tell me what you need to protect and by when. I'll reply with whether I can help and how I'd approach it.