Tethis Lamsal — Software Engineer, Cybersecurity Engineer, Bug Bounty Hunter, Penetration Tester in Nepal.

Tethis Lamsal is a Software Engineer and Cybersecurity specialist based in Nepal. Focus: Software Engineering, Cybersecurity & Bug Bounty. Roles: Software Engineer, Bug Bounty, Penetration Testing, Cybersecurity, Full-Stack Development, AI / ML, Web / Systems Security. Tethis Lamsal — Software Engineer and Cybersecurity specialist in Nepal. Bug bounty, penetration testing, full-stack web & mobile development, and AI/ML. Hi, I'm Tethis Lamsal — a Software Engineer and Cybersecurity specialist based in Nepal. I spend a questionable amount of time trying to break software; legally, of course. Bug bounty hunting, pentesting, recon, exploitation... if there's a crack in the wall, I want to know why it's there. That curiosity is what pulled me into cybersecurity and keeps me shipping safer systems. When I'm not doing that, I'm usually building the wall. React for the web, Flutter for mobile, Python for whatever strange idea I have that week, and AI whenever I feel like teaching a computer to recognize things or write code for me. Full-stack software engineering by day, offensive security by night. I like understanding how things work by first figuring out how they fail. It's a lot more fun that way. Most of my projects start with a dumb idea, grow into something surprisingly useful, and leave me with at least three new terminal windows I forgot to close. haha Security: Burp Suite, Nmap, Metasploit, Wireshark, sqlmap, ffuf / Gobuster, OWASP Top 10, Web App Pentesting, Bug Bounty, Network Recon, Linux (Kali / Arch). Web: React, Vite, JavaScript, TypeScript, HTML5 / CSS3, Node.js, REST APIs. Mobile: Flutter, Dart, Riverpod / Bloc, Firebase, Android Release. AI / ML: Python, PyTorch, YOLOv8 / Ultralytics, OpenCV, TTS / STT (Coqui, Whisper), Data Annotation. Languages & Tooling: Python, Dart, JS / TS, Bash, Git & GitHub, Docker, Linux CLI AI / ML Engineer (Hobby) at Independent (2024 — Present). Trained voice-clone models with Python tooling (MangoRVC). Experimented with real-time deepfake pipelines (Deep Live Cam). Built computer-vision projects with YOLOv8 for detection tasks. Software Engineer (Freelance) at Freelance — Nepal (2023 — Present). Shipped full-stack websites and client projects as a software engineer. Built and released small-to-medium Flutter mobile apps for Android. Worked across React, JavaScript/TypeScript, Python, and modern tooling. Used AI-assisted workflows to move faster without sacrificing craft. Cybersecurity & Bug Bounty at TryHackMe / Hack The Box / PicoCTF & independent research (2022 — Present). White-hat hacking, web app pentesting, and responsible vulnerability disclosure. Bug bounty practice: recon, exploitation, and reporting (including Meta/Facebook). Hands-on with phishing labs, malware analysis basics, and offensive tooling. Comfortable with Nmap, sqlmap, Metasploit, Burp Suite, Wireshark, hashcat, and more. IT & Self-taught Engineering at Nepal (2019 — Present). Building and breaking software since 2019 — continuous learning in engineering and security.

Tethis Lamsal — Software Engineer & Cybersecurity, Nepal

Tethis Lamsal — Software Engineer and Cybersecurity specialist in Nepal. Bug bounty, penetration testing, full-stack web & mobile development, and AI/ML.

Hi, I'm Tethis Lamsal — a Software Engineer and Cybersecurity specialist based in Nepal. I spend a questionable amount of time trying to break software; legally, of course. Bug bounty hunting, pentesting, recon, exploitation... if there's a crack in the wall, I want to know why it's there. That curiosity is what pulled me into cybersecurity and keeps me shipping safer systems. When I'm not doing that, I'm usually building the wall. React for the web, Flutter for mobile, Python for whatever strange idea I have that week, and AI whenever I feel like teaching a computer to recognize things or write code for me. Full-stack software engineering by day, offensive security by night. I like understanding how things work by first figuring out how they fail. It's a lot more fun that way. Most of my projects start with a dumb idea, grow into something surprisingly useful, and leave me with at least three new terminal windows I forgot to close. haha