Experience

OrangeHRM

• United States
• Software Development
• 100 - 200 Employee

• Senior Security Engineer

  • Jan 2023 - Present

• Security Engineer

  • Jan 2022 - Jan 2023

  - Conducting regular vulnerability assessment and penetration testing and implement necessary controls to mitigate risks.- Manag security incidents, analysis, and remediation, to minimize the impact of security breaches- Current security posture review and improve with new security strategies as needed- Research and implement best security practices - Analyze and mitigate security threats in a timely manner- Compliance audits and assessments and developed remediation plans to address identified gaps- Static Application Security Testing - IT Security framework such as OWASP, ISO 27001 Show less

• Associate System Security Engineer

  • Feb 2021 - Jan 2022



EY

• United Kingdom
• IT Services and IT Consulting
• 700 & Above Employee

• Technology Advisory Associate - Cyber Security

  • Jul 2019 - Feb 2021

  • Performing Cyber security and network security related engagements for clients from diverse sectors.• Performing ISO 27001 and ISO 22301related engagements for clients from diverse sectors. • Performing internal and external vulnerability Assessment and Penetration Testing for web servers, systems and web applications.• Conducted in developing and reviewing information security policies, procedures and guidelines relation to ISO 27001 standard.• Performing Business Continuity Plan (BCP) development and review, which requires the coordination of resources from all levels of management and areas of the company.• Conducting detailed risk assessments by classifying, evaluating, and monitoring the company’s risk. Show less

• Trainee - Cyber Security Analyst

  • Jan 2019 - Jul 2019



Citizens Development Business Finance PLC

• Sri Lanka
• Financial Services
• 300 - 400 Employee

• Intern - Information Security

  • Aug 2017 - Dec 2017

  • Involve in ISO 27001 implementations(Asset Classification, Security Awareness). • Making an action plans to network upgrade • Network vulnerability scanning. • Involve in ISO 27001 implementations(Asset Classification, Security Awareness). • Making an action plans to network upgrade • Network vulnerability scanning.