Looking for a job

sanduni sudusinghe

@sandunisudusinghe1

Cybersecurity Analyst at Scybers supporting ISO 27001 and SOC 2 compliance and improving security operations across client environments.

Sri Lanka

Message

What I'm looking for

I’m looking to build a long-term career in Risk and Compliance, while continuing to learn new technologies and take on new challenges. I’m willing to work in a 24/7 environment.

At Scybers, I support ISO 27001 and SOC 2 Type II implementation and compliance across client environments. I conduct information security risk assessments, contribute to risk treatment and remediation tracking, and assist with audit preparation.

In security operations, I monitor and investigate alerts using Microsoft Sentinel, Google SecOps, and Microsoft Defender XDR. I’ve managed security operations for 13 clients, contributed to a migration from LogRhythm to Microsoft Sentinel, and conducted threat hunting and phishing investigations.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Analyst

Current

Scybers

Jan 2024 - Present (2 years 9 months)

Supported ISO 27001 and SOC 2 Type II implementation and compliance activities across multiple client environments. Monitored and responded to security alerts using Azure Sentinel, Google SecOps, and Microsoft Defender XDR, and managed security operations for 13 clients.

ISO 27001 SOC2 Risk Assessment Third Party Risk Management Policy Reviews Audit Preparation Azure Sentinel Google SecOps Defender XDR KQL Log Analysis Threat Hunting Email Phishing Investigation Incident Response DLP Report Writing

Information Security Intern

People's Bank

Jan 2021 - Dec 2022 (1 year 11 months)

Assisted with PCI DSS audit and implementation for credit cards, supported vulnerability assessment reporting, and conducted internal security awareness sessions.

PCI DSS Vulnerability Assessment Security Awareness