Chathurangi Edussuriya Email & Phone Number

Finland

Finland

My thesis explores the integration of security scanning mechanisms into Large Language Models (LLMs) for code generation, aiming to proactively identify and address security vulnerabilities during the software development process. By incorporating these methods, I aim to advance a 'shift-left' approach in Application Security (AppSec) and Security Development Operations (SecDevOps), thereby revolutionizing traditional software development practices. Through empirical evaluation and analysis, I assess the effectiveness of prompt engineering strategies and the necessity for external security scanning tools in ensuring the security of LLM-generated code. The research contributes to enhancing software development efficiency, reducing developer workload, and advancing cybersecurity practices in the industry.

Finland

Engineered Terraform containers and pipelines, designed to effortlessly deploy standardized templates equipped with integrated SecDevOps tooling. Implemented seamless integration with GitLab CI/CD, Jenkins, Terraform, Docker, and shell scripts to ensure smooth project workflows.Spearheaded the development of a comprehensive Ansible solution, streamlining deployment processes across managed nodes and servers.Orchestrated Jenkins pipelines, integrating Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Infrastructure as Code (IAC) security tools (such as Coverity, Blackduck, Checkov) for robust DevSecOps practices.

Sri Lanka

Implemented an end-to-end application to view invoices (transaction history). Technologies: Spring, REST API, AWS Aurora DB, EC2 auto-scaling groups, AWS Lambda, AWS CloudFront, ExpressJS, ReactJS, AWS Lambda, AWS CloudFront Introduced a fully functional audit logging mechanism and an event monitoring mechanism The solutions significantly increased the efficiency of proactive monitoring of the production environment (debugging requests/responses, error scenario analysis). Technologies: Aspect-Oriented Programming (AOP), Datadog, and AWS CloudWatch. Developed a throttling mechanism for AWS Batch by controlling the compute environment of the service and the number of concurrently running threads of the application. Technologies: AWS Batch, AWS Lambda Designed a scalable Jenkins architecture for CI/CD functionality of the pricing services Technologies: Terraform, Jenkins, AWS ECS, AWS EFS, Cloud Map and Role-based access control with AWS Cognito. Created queries to sync new tables from legacy databases (SUS system) to the MySQL database Technologies: MySQL, AWS RDS, Kinesis data streams. Introduced a log purging mechanism to retain the logs long-term by transferring logs from CloudWatch to the S3 glacier. Technologies: AWS CloudWatch, S3, AWS Lambda, python, boto3 Performed critical security vulnerability fixes for the issues found via Veracode and by other means on the Cloud Pricing components Participated in all phases of software development of products through agile methodologies, from requirements definition through successful deployment through Jira, Scrum, and Sprint ceremoniesSite Reliability Engineering: Actively participated in troubleshooting issues, Proactive monitoring and alerting through DataDog Maintained code quality through Sonarqube and adhered to the test pyramid by completing unit testing, fault tolerance testing, and performance testing. Technologies: SonarQube, PowerMockito, Jest, Junit, Jenkins, JMeter

Colombo, Western, Sri Lanka

Kubernetes deployment for testing product updates. Developed a new architecture to test the product updates in Kubernetes in different infrastructure combinations.

Master'S Degree, Computer Science

Bachelor'S Degree, Computer Engineering

Master In Cyber Security And Cloud Computing, Computer Science

Double degree program under SECCLO

Master'S Degree, Computer Science

Master'S Degree, Çyber Security