Nalika Jayarathna

I've built production-style SOC monitoring environments using Wazuh, Microsoft Sentinel, and Azure, reducing mean time to detection to under 40 seconds in hands-on lab environments.

In my Wazuh SOC homelab, I deployed end-to-end Windows endpoint monitoring on Ubuntu, simulated RDP brute-force attacks with Hydra, wrote custom detection rules for Event ID 4625, and configured File Integrity Monitoring for critical system files. I also integrated Suricata IDS and OpenVPN, correlating VPN authentication with Windows logins to detect potential impossible travel mapped to MITRE ATT&CK T1078.

I've extended this work into cloud security through an Azure monitoring lab with Microsoft Sentinel, Log Analytics, NSG hardening, RBAC, and Azure Policy enforcement. I validate controls rather than just configure them, including testing policy blocks against non-compliant VM deployments.

I've also developed Aegis Guard, a Python clipboard DLP tool that detects and sanitizes sensitive data in real time, plus a custom log-parsing detection engine for failed-login alerts and audit trails. I'm pursuing a BSc (Hons) in Cyber Security at SLIIT and hold CompTIA Security+ and Microsoft Azure Fundamentals certifications.