Malith Lankarathnage Email & Phone Number

Witney, Gb

London, England, United Kingdom

- Ensured compliance with Cyber Essentials and other regulatory requirements, aligning cyber infrastructure with CQUEST standards.- Conducted comprehensive risk assessments, identified vulnerabilities and threats, and implemented mitigation solutions, reducing risks.- Coordinated external audits to ensure alignment with established security standards and improved compliance reporting.- Monitored and managed SentinelOne Antivirus and EDR, identifying threats, investigating alerts, and creating exclusions for internal software services.- Implemented and managed Symantec File Share Encryption to secure sensitive files and comply with regulatory requirements, safeguarding against unauthorized access.- Designed and maintained a whitelisted software repository, protecting systems from unapproved software installations.- Regularly updated internal security infrastructure and met annual penetration testing requirements, enhancing system resilience.- Led investigations into security breaches and incidents, implementing remediation strategies to preventrecurrence.- Detected and addressed ongoing threats using a robust threat intelligence framework, reducing potentialsecurity incidents.- Deployed and maintained daily, weekly, and monthly offsite backups using Arcserve and Veeam, ensuring data availability and disaster recovery readiness.- Configured and maintained TrendMicro email filtering to combat phishing and malicious email attacks, reducing email-borne threats.- Implemented and deployed regular software updates using ManageEngine Desktop Central, ensuring system patch compliance across the organization.- Developed partnerships with security experts and vendors, gaining access to emerging cybersecurity knowledge and support resources.- Facilitated user awareness sessions, increasing the organization's ability to detect phishing and adopt security best practices, and produced detailed reports for senior leadership.

Colombo District, Western, Sri Lanka

- Researched and acquired expertise in advanced security solutions, including Firewalls, Data Loss Prevention (DLP), Privileged Access Management (PAM), and Identity and Access Management (IAM), tailoring solutions to meet client-specific requirements.- Collaborated with vendors to establish testing environments, receiving comprehensive training to ensuresuccessful solution deployment.- Led Proof of Concept (POC) evaluations for GTB DLP, Thycotic PAM, and CyberArk PAM, demonstrating their viability and securing adoption by leading financial institutions.- Implemented, configured, and maintained GTB DLP and Thycotic PAM solutions, achieving PCI-DSS compliance for prominent Sri Lankan banks.- Conducted User Acceptance Tests (UAT) to validate and exhibit the implemented security solutions, ensuring alignment with client expectations.- Managed vendor correspondence to address and resolve security product-specific issues, ensuring timely and effective resolutions.- Facilitated user awareness sessions for client teams, promoting adoption of best practices and ensuringeffective utilisation of implemented solutions.

Colombo

- Secured enterprise infrastructure by maintaining IT security standards and ensuring compliance across systems and services supporting over 20,000+ global employees.- Conducted regular vulnerability assessments and penetration testing using AlienVault, Nessus, Cymulate etc., identifying and mitigating critical vulnerabilities to enhance system security.- Managed incident reporting and handling, focusing on malware-related issues and compliance reviews following major security incidents.- Led security awareness campaigns and delivered training sessions for IT and project teams, promoting a culture of security awareness across the organization.- Conducted Level 3 threat hunting and advanced security investigations, analyzing systems, applications, and security tools to identify and mitigate threats.- Organized Linux server security by implementing server hardening techniques, deploying security tools, and scripting automation with Bash.- Administered the Cybereason Endpoint Detection and Response (EDR) solution, ensuring endpoint security compliance, stabilizing tool operations, and creating detailed Standard Operating Procedures (SOPs) and troubleshooting guidelines for L1 and L2 teams.- Performed endpoint and server hardening, privileged account reviews, and configuration audits, enhancing system resilience and minimizing risk exposure.

Colombo

- Developed and streamlined security compliance management by creating a centralized portal, significantly reducing manual efforts for compliance checks. Integrated data from various sources including Antivirus, Encryption, Active Directory (AD), SCCM, CyberArk, and Cybereason, storing the information in an MSSQL database and presenting insights through web applications built using .NET, C#, and Bootstrap.- Effectively communicated the organization’s security posture to senior management and stakeholders using clear and engaging data visualizations created in Power BI.- Improved operational efficiency by automating repetitive security tasks using PowerShell, VBScript, and Python, demonstrating proficiency in scripting and best practices in automation.- Proactively identified and analyzed security threats through SIEM tools and security platforms such as McAfee, Cybereason, CyberArk, and Thycotic, enhancing threat detection and mitigation capabilities.- Reviewed and monitored incident tickets, service requests, and ServiceNow queues, participating in change and problem management processes while ensuring adherence to SLA response and resolution times.

No 95, Castle Street, Colombo 08.

- Developed client-specific systems using C#, .NET, Java, PHP, and various web frameworks, ensuring high-quality, customized solutions.- Designed and reviewed web structures and templates with clients prior to development, ensuring alignment with their requirements and expectations.- Conducted rigorous application security testing following OWASP guidelines, utilizing tools such as OWASP ZAP and Nessus to identify and mitigate vulnerabilities during the development phase.- Managed server infrastructure per client specifications, including resource allocation, maintenance, andensuring secure and optimal performance.

Master'S Degree, Cyber Security

Bsc Special(Hons) In Information Technology-Specialized In Cyber Security