>_ ICT Undergraduate · Sri Lanka · GMT+5:30
I'm a cybersecurity and digital solutions engineer focused on Observability, SAST/DAST, WAF, SASE, Terraform, and Blockchain.
01
From writing my first Python script to running CTF challenges and earning Cisco & cloud certifications — every project has been a step toward building systems that scale, defend, and deliver.
02
The cyber capabilities, platforms, and operational areas I work with most often.
03
I'm a BTech Information and Communication Technology student at the University of Sri Jayewardenepura, currently working in cyber roles around observability, application security, network security, and digital solutions.
My day-to-day focus includes Datadog, Veracode, Imperva, F5, Zscaler, Terraform, and cloud/network security controls — with a growing interest in blockchain and secure automation.
Open to security engineering, observability, DevSecOps, and cyber infrastructure roles across cloud, network, and application security.
04
My recent roles and academic path, aligned with the cyber work I do today.
INNOV8
Working on cybersecurity and digital solutions in Colombo, with a focus on observability, application protection, networking, and security operations.
INNOV8
Built practical exposure around cyber delivery, networking, and digital solutions while supporting security-focused engineering work.
Mobitel (Pvt) Ltd
Supported networking and cybersecurity tasks in a telecom environment, contributing to hands-on enterprise security exposure.
University of Sri Jayewardenepura
Full-time study focused on ICT foundations, networking, software, and security. Specializing in BTech / BICT track work.
SLIIT
Cisco networking and cybersecurity track covering enterprise networking, security, automation, and routing/switching essentials.
05
Real projects across application security, observability, automation, and AI.
01 / AppSec
Proxy-based ML WAF that learns from HTTP traffic, extracts request features, scores abuse with Random Forest, blocks SQLi, XSS, path traversal, command injection, and null byte attacks in real time.
02 / Secure Coding
A hands-on secure coding lab with vulnerable and fixed versions for SQLi, buffer overflow, XSS, Java deserialization, and broken authentication.
03 / File Security
One-click encryption and decryption utility for PDFs using Python and the Cryptography module to protect sensitive documents.
04 / AI Safety
Real-time AI system that detects sleepiness from webcam input and alerts drivers before fatigue leads to accidents.
05 / Cyber Range
A cyberpunk-style CTF platform with web exploitation, forensics, reverse engineering, cryptography, progress tracking, and leaderboard support.
06 / Resilience
A cyber simulation that stresses the browser with DDoS-like behavior and includes an interactive response challenge for defensive testing.
07 / Observability
Hands-on observability work across monitoring, metrics, dashboards, alerts, Kubernetes, AWS, agent setup, and tagging best practices.
08 / Real-time Apps
A real-time messaging platform built with React, Next.js, and Ballerina for the WSO2 Innovate challenge.
09 / Mobile
Mobile app for internship discovery with CV analysis, matching, and personalized recommendations.
10 / IoT
IoT-based cafeteria workflow automation covering queue management, inventory, payments, and table seating controls.
11 / NLP / ML
OCR and NLP pipeline that extracts and scores skills from CVs to help with fast shortlisting.
06
Where I've contributed, organized, and learned alongside peers.
Oct 2024 — Present
Information & Communication Technology Society, UOSJ
Dec 2024 — Feb 2025
CryptX 1.0 — Cybersecurity event, UOSJ
Jan 2024 — Present
IEEE Student Branch, University of Sri Jayewardenepura
Jan 2021 — Aug 2022
Global GIS Pvt Ltd, Nugegoda
07
Core cyber and infrastructure products I work with.
Datadog
Veracode
SonarQube
F5
Cloudflare
Okta
Terraform
AWS
Azure
Docker
Kubernetes
GitHub Actions
Centralized
Hyperledger Fabric
08
Recent credentials from cybersecurity, observability, cloud, and networking training.
Cisco · Nov 2024
Cisco · Jul 2024
(ISC)² · Dec 2024
Oracle · Feb 2025
Google · Jun 2024
Datadog · May 2026
Linux Foundation · May 2026
Linux Foundation · May 2026
09
Competitions, awards, and proud moments.
SLIIT CodeFest · Team Running-Config · Networking & system configurations
SLIIT CodeFest · Team Code Alpha · Cybersecurity & ethical hacking
10th Annual Cyber Security Summit · Forensics & ethical hacking
WSO2 · API development & integration using Ballerina
District 3rd place at GCE Advanced Level, merit-listed islandwide
10
Open to cybersecurity, observability, DevSecOps, and digital security opportunities across cloud, network, and application security.