Open to opportunities

Malintha Maddumage

@malinthamaddumage

Message

Cybersecurity engineer specializing in application security, penetration testing, and incident response.

Sri Lanka

Message

What I'm looking for

I seek a cybersecurity role where I can lead application security testing, perform penetration tests, improve detection and response, and work in a collaborative, compliance-focused team that values continuous learning.

I am a versatile cybersecurity engineer with hands-on experience protecting critical systems and sensitive data across regulated environments. I specialize in web, mobile and API security testing, vulnerability assessment, and penetration testing.

I have practical experience using industry tools including QualysGuard, Nessus, Acunetix, OWASP ZAP, MOBSF, Frida, Bloodhound, CrowdStrike, Zimperium and RASP solutions. I regularly perform manual, automated, dynamic and static scans and provide go-live clearances for updates.

I am experienced in firewall reviews, SIEM dashboarding and reporting, EDR monitoring, incident response and regulatory frameworks such as ISO 27001, NIST and CIS Controls. I have delivered security architecture input and collaborated cross-functionally to implement layered defenses and SASE solutions.

I hold a BSc (Hons) in Information Technology (specializing in Cyber Security), certifications including C|EH and CC, and have led academic information security projects and published research on topics such as ISO 27001 toolkits and AI in modern cybersecurity platforms.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer

Current

Hatton National Bank

May 2024 - Present (1 year 5 months)

Lead penetration testing, vulnerability assessment and incident detection using tools like Qualys, Nessus, Acunetix and EDR solutions; reviewed firewall rules and supported security architecture, SOC operations and compliance since May 2024.

Penetration Testing Qualys Nessus Acunetix EDR (CrowdStrike SIEM Firewalls Incident Response

Cyber Security Trainee

Hatton National Bank

Jan 2023 - May 2024 (1 year 4 months)

Performed manual, automated, dynamic and static web and mobile application security testing and supported go-live clearances for updates, contributing to vulnerability identification and remediation from Jan 2023 to May 2024.

Application Security Mobile Security Static Analysis Dynamic Analysis OWASP ZAP MobSF Vulnerability Assessment Penetration Testing

Education

Degrees, certifications, and relevant coursework

Sri Lanka Institute of Information Technology

Bachelor of Science (Hons) in Information Technology, Information Technology (Cyber Security)

2019 - 2023

Activities and societies: Project leader of Information Security Risk Management Project; member of ISAACA and CS squad; research publications on ISO 27001 toolkit and AI in cyber security.

Completed BSc (Hons) in Information Technology specializing in Cyber Security from June 2019 to June 2023.