Open to opportunities

shenal Mario

@shenalmario

Message

Certified cybersecurity engineer specializing in offensive and defensive security.

Sri Lanka

Message

What I'm looking for

I am seeking hands-on security roles focused on red/blue teaming, app and cloud penetration testing, and threat detection where I can grow technically and help harden defenses.

I am a proactive, certified cybersecurity engineer with hands-on experience in Red and Blue Team exercises, web and mobile application assessments, and responsible vulnerability disclosure, including an owned CVE.

My work includes full-scope and assumed-breach red team engagements, mobile app penetration testing (iOS/Android), web application testing, source code review, reverse engineering, and threat intelligence integration. I have built ML-driven DNS threat detection in ELK and implemented honeypots and Azure Sentinel integrations.

I hold multiple industry certifications, contribute to bug bounty programs, and have placed in several CTFs; I focus on producing professional security reports and practical defenses that strengthen organizational security posture.

Experience

Work history, roles, and key accomplishments

Current

Freelance Security Researcher

Current

Self Employed

Jan 2024 - Present (2 years 2 months)

Conducted bug bounty engagements and security research leading to responsible disclosures including CVE-2025-60880 and recognition in public programs, and performed ad-hoc penetration tests for clients.

Bug Bounty Vulnerability Research Exploit Development Responsible Disclosure Manual Testing

Trainee Red Team Engineer

Orel IT (Pvt) Ltd.

Aug 2024 - Mar 2026 (1 year 7 months)

Executed full-scope and assumed-breach Red Team exercises for healthcare and enterprise clients, conducted mobile (iOS/Android) and web application penetration tests, and produced professional security reports documenting findings and remediation.

Burp suite Corellium Frida SSL Root Bypassing Threat Intelligence Report Writing

Education

Degrees, certifications, and relevant coursework

Sri Lanka Institute of Information Technology

Bachelor of Science, Cyber Security

2022 -

Grade: 3.42/4.00 GPA

Activities and societies: Security projects, CTF participation, research in DNS threat detection and SIEM integration

Pursuing a Bachelor of Science specialized in Cyber Security with practical projects in SIEM, Azure Sentinel, and AWS SOC implementations; achieved a 3.42/4.00 GPA.