Education
-
Kingston University (UK)
MSc in Network & Information Security
-
MBCS
Higher Education Qualification
-
Zahira College Colombo – Sri Lanka • G.C.E Advanced Level Examination
G.C.E Advanced Level Examination
-
Zahira College
G.C.E Ordinary Level Examination
Experience
-
Airarabia Group - Present
Lead - Security Operation
Lead, mentor, and manage a 24x7 SOC team, fostering continuous development, collaboration, and knowledge sharing. Oversee end-to-end incident response, ensuring timely detection, investigation, and resolution of security threats. Enable real-time alerting and optimize SIEM use cases for improved threat detection and reduced false positives. Implement knowledge transfer and training plans to ensure the team remains up-to-date on the latest security practices and tools. Drive detection engineering efforts by implementing analytical rules, pattern matching, anomaly detection, threshold-based alerts, and impossible travel detection. Reduce false positives and enhance observability by integrating diverse log sources into the detection pipeline. Automate incident response for detected threats, leveraging SOAR capabilities to enable a next-gen SOC experience with automated action initiatives. Ensure log sources are normalized and parsed correctly to maintain data consistency and detection accuracy.
-
Wiley
Senior Information Security Analyst
Responds to alerts from various monitoring systems and platforms to address potentially malicious events within defined SLA. Provide mentorship and guidance to Security Analysts for conducting comprehensive investigations and analyses for security incidents, and offering knowledge transfer, sharing best practices, and educating on security tools and methodologies. Actively engaged during security incidents, involving immediate containment, eradication, mitigation, and post-incident analysis activities, prioritizing tasks, delegating responsibilities, and ensuring clear communication across all involved teams. Provided training to onboard new SOC team members on security tools, incident response procedures, and Security Analyst’s roles and responsibilities.
-
Virtusa
Consultant – Information Security
Independently leads computer incident investigations, determining the cause of the all security incident and preserving evidence for potential action as L2 SOC Analyst. Responds to alerts from various monitoring systems and platforms to address potentially malicious events within defined SLA. Building hypothesis for Threat Hunting and Custom Rule Creations. End to end SIEM Administration and Management. (McAfee ESM, Microsoft Sentinel) Finetuning the rules as per the compliance and management requirement. • Perform triage and advanced analysis tasks across endpoint, server, and network infrastructure.
-
Virtusa 2015 - 2017
IT Support Engineer
Providing IT technical support, answering support queries via phone, email & ticketing system. Responsible for diagnosing & resolving hardware, software & end user issues.