About Me
Offensive Security Professional with a strong emphasis on practical, hands-on learning and real-world application. I have developed deep technical expertise in modern attack methodologies, red teaming, and defensive strategies through hands-on experience and continuous learning, staying adaptable to the rapidly evolving cybersecurity landscape.
Skilled in organizing and creating Capture The Flag (CTF) challenges, mentoring others, and contributing to the growth of the cybersecurity community. I enjoy designing realistic scenarios that test both offensive and defensive security skills.
Experienced in offensive security practices including penetration testing, vulnerability assessments, and simulating real-world attack scenarios to improve security posture.
Outside of cybersecurity, I love creating content about the things I do, including pentesting, gaming, and sharing knowledge. I’m especially passionate about playing Chess and blending gaming with my creative side.
Professional Journey
Associate Engineer - Information Security
RedCERT (Pvt) Ltd
June 2025 - Present
- Conduct Internal and External Red Team operations for leading Sri Lankan banks and companies, providing actionable remediation recommendations.
- Perform advanced penetration tests on web applications and network infrastructures, and assist with remediation to defend against real-world attacks.
Head Of CTF
HashX (Pvt) Ltd
April 2024 - June 2025
- Lead the research and development initiatives of the CTF department, fostering innovation and ensuring the department remains at the forefront of the industry
- Manage CTF events and infrastructure, ensuring seamless operations and performance
- Maintain quality control of challenges to guarantee fairness, scalability, and consistency in competitions
- Create advanced-level CTF challenges focused on Network, Web Penetration Testing, and Forensics
Trainee - Cyber Security
Hatton National Bank PLC
June 2024 - June 2025
- Run internal red team assessments and operations to simulate real-world attacks and identify weaknesses in the bank's security posture
- Conduct vulnerability assessments and penetration testing on the bank's web applications, mobile platforms, and internal networks to identify and mitigate security risks
- Report findings directly to the Chief Information Security Officer (CISO) and provide actionable remediation strategies
- Monitor and report on Data Loss Prevention (DLP) and Endpoint Detection and Response (EDR) solutions to ensure the security of sensitive information and systems
- Support various information security operations and collaborate with teams to address complex security challenges
![Red Team Analyst [CRTA] - CyberWarfare Labs](/images/certifications/crta.png)
