Network Administrator

• Sep 2023 - Present

Assistant Manager Information systems security

• Sep 2018 - Apr 2023

National Savings Bank is a state-owned Savings Bank in Sri Lanka. The largest savings Bank in Ceylon. As a senior information security professional at the bank, I managed the Bank's Security Operations Center (SOC) from its implementation onwards. I oversaw all SOC operations, including conducting threat hunting and forensic investigations. In addition, I led the implementation project for the DLP system and File Classification, providing end-user awareness. Furthermore, I installed two new Security Information and Event Management (SIEM) systems, configured and fine-tuned them, and integrated them with the SOC operations. One of my key responsibilities was leading the annual PCI-DSS certification process for the bank, ensuring that the bank remained compliant with the global information security standard. Additionally, I diligently worked towards the ISO 27001:2013 certification project for the bank, ensuring its successful completion. To ensure the bank's information security posture was robust, I conducted comprehensive internal and external VA scans and played a key role in several bank network projects. This included replacing firewalls, implementing NAC, and conducting security assessments of network devices. I also led the WAF replacement project. Furthermore, I implemented and maintained the bank's NDR and EDR tools, staying up-to-date with the latest security trends and technologies to improve the bank's overall security posture. I also tested the security configurations for the bank's new core banking system implementation, mobile banking application, and Internet banking system, ensuring that effective security measures were implemented and tested for these critical systems. This extended version provides more detail on your key responsibilities and accomplishments at Bank. It showcases your experience and skills in managing the SOC, leading the implementation of critical security systems, and ensuring compliance with industry standards. Show less

Executive IT

• May 2012 - Sep 2018

We are a leading financial services provider in Sri Lanka with a rich financial history and being country’s pioneer specialist in trade finance and investment banking, MBSL is listed in the Colombo Stock Exchange and is a finance company licensed by the Central Bank of Sri Lanka. As one of the most stable finance companies in the country, we provide a range of secure investments for your funds, together with financial support for the growth and development of your entire family. Providing innovative & dynamic financial solutions for the last 4 decades, MBSL is one of Sri Lanka’s leading financial institutions. With a range of diversified services including Leasing, Loans, Pawning, SME lending together with a broad portfolio of Savings and Deposit products, we serve our customers achieve their diverse financial needs and aspirations. Job Role • As a Network Administrator at the bank, I played a pivotal role in spearheading a major project to design and implement a robust Disaster Recovery (DR) site with a one-to-one replication hot site. The hot site's real-time replication capabilities provided an added layer of resilience, reducing recovery time and enhancing the bank's overall business continuity. • In the bank's IT division, I excelled in hands-on Firewall replacement projects. I expertly installed and configured Checkpoint and Palo Alto firewalls, enhancing the bank's network security. • As an Information Security Officer in the bank, I have specialized in SIEM (Security Information and Event Management) implementation. My expertise includes hands-on experience with SIEM tools such as McAfee and Splunk, alongside conducting comprehensive security assessments and compliance reviews. With a focus on maintaining a secure environment, I am committed to safeguarding the organization's data and infrastructure through effective security measures and proactive risk management. Show less

System Administrator

• May 2008 - May 2012

Central Industries manufactures and markets Sri Lanka's most awarded PVC brand - 'NATIONAL PVC' potable water pipes and fittings. The Company also manufactures and distributes PVC ball valves, PVC solvent cement, rigid and flexible electrical conduits, rectangular snap-on conduit casings, flexible PVC garden hoses, rain gutters, pipes and fittings for rainwater and soil-waste management under the Company’s flagship brand ‘NATIONAL PVC’. PE water tanks and septic tanks are manufactured and marketed under the brand name ‘NATIONAL PE’ and stainless steel water tanks under the brand name ‘NATIONAL SS’. A range of rigid electrical conduits are also manufactured and marketed under the brand name ‘CILTEC’. Central Industries also distributes 'AQUATEC' Water Taps and Accessories. With its wide range of superior quality products of local and international standards, trusted by both professionals and the domestic user, Central Industries caters to a number of industries and applications ranging from residential plumbing to complex agricultural and industrial water supply, drainage projects, water treatment systems, dredging and engineering etc. The Company has an appointed strategic network of Authorized Distributors and Dealers for all its products ensuring island wide availability of its supplies. Established in 1984 as a member of the prestigious Central Finance Group, a leading Finance Company in Sri Lanka, Central Industries is a public quoted company listed on the Colombo Stock Exchange. Job Role * Installation of Server Hardware & Software (Server virtualization - vSphere / VMware ESXi / Hyper-V) and Configuring Windows & Linux based servers. * Infrastructure develops Cloud Computing & Big Data analysis. * Installation of Active Directory / DHCP / DNS / Proxy /Mail / Exchange / IIS / Remote, VPN / etc. Show less

Trainee Computer Technician

• May 2007 - Dec 2007

Job Role * Design, planning, implementing and maintaining the network. *Implementation & maintenances of PABX & CCTV systems. Job Role * Design, planning, implementing and maintaining the network. *Implementation & maintenances of PABX & CCTV systems.