Offensive security professional and Cyber Security Researcher. I lead security engineering at TechCERT, Sri Lanka's most trusted cybersecurity institution, with hands-on expertise across malware analysis, red teaming, and enterprise security. I spend my days breaking what matters, building what defends it, and teaching others to do both.
Dissecting advanced malware and emerging evasion techniques used by modern attackers — turning findings into actionable intelligence.
Developing real-world malware samples, offensive tooling, and red team scenarios for training, research, and adversary simulation.
Security assessments of proprietary desktop applications — identifying design weaknesses, cracking resistance, and runtime vulnerabilities.
End-to-end vulnerability assessment and penetration testing across web applications, APIs, and enterprise network infrastructure.
Auditing organisational Identity & Access Management systems — reviewing configurations, roles, and trust boundaries.
Building custom offensive and defensive security tools — integrating AI and LLM capabilities for real-world deployment.
Delivering practical, scenario-based cybersecurity awareness training to corporate clients — real simulations, not slides. Also serving as a guest visiting lecturer at the University of Moratuwa and other institutions.