Lakshan Siriwardhana
Vaasa
Summary
Senior Information Security Engineer with over 10 years of expertise in banking, enterprise IT, and cloud security. Proficient in SOC operations, cloud security on Microsoft Azure, and vulnerability management. Currently pursuing an MSc in Artificial Intelligence and Data Engineering, with strong skills in security automation and data-driven analysis. Achieved significant reduction in security breaches through strategic vulnerability assessments and proactive risk management.
Overview
12
12
years of professional experience
1
1
Certification
Work History
Senior Information Security Engineer
IFS
01.2022 - 01.2025
- Supported SOC and security monitoring operations using SIEM and Microsoft Defender XDR technologies.
- Implemented and managed cloud security controls in Microsoft Azure, including posture management and remediation.
- Conducted vulnerability assessments, coordinated penetration testing activities, and tracked remediation efforts.
- Performed threat intelligence analysis and supported incident investigations and post-incident reviews.
- Contributed to security assurance activities and alignment with internal security policies and standards.
- R&D International (UK)
Network Specialist
HCL
01.2021 - 01.2022
- Configured, monitored, and troubleshot enterprise network infrastructure.
- Managed Cisco routing and switching environments and supported wireless networking solutions.
- Monitored network performance and availability in large-scale enterprise environments.
- Collaborated with cross-functional teams to resolve incidents and improve network reliability.
- Technologies (India)
Junior Executive Assistant - Data Centre Operator
Commercial Bank of Ceylon PLC
01.2013 - 01.2021
- Supported 24/7 data centre operations in a regulated banking environment.
- Monitored core banking systems and infrastructure, including AS/400 platforms.
- Performed incident escalation, system troubleshooting, and operational support.
- Participated in Business Continuity Planning (BCP) and Disaster Recovery (DR) initiatives.
- Supported ATM network operations to maintain service availability.
- Sri Lanka
Education
Master of Science (MSc) - Artificial Intelligence & Data Engineering
University of Vaasa
Finland01.2027
Bachelor of Science (BSc) - Cyber Security (First Class Honours)
University of Gloucestershire
United Kingdom01.2020
Skills
- Cloud security (Microsoft Azure, WAF, CSPM)
- Incident response (L2/L3)
- SIEM and EDR management (Microsoft Sentinel, Defender)
- Threat intelligence and hunting
- Penetration testing coordination
- Security policies (ISO 27001, SOC 2)
- Security automation (Azure Logic Apps, Power Automate)
- Networking (routing and switching)
- Python programming
- Machine learning fundamentals
- Threat analysis
- Vulnerability assessment
- Network troubleshooting
- Project management
- Data engineering
- Port security
- Network security management
Certification
- Certified Ethical Hacker (CEH v12)
- Microsoft Azure Fundamentals (AZ-900)
- Microsoft Security, Compliance & Identity Fundamentals (SC-900)
Additional Information
https://threathuntingprocess.blogspot.com/2022/11/threat-hunting.html, https://hub.docker.com/repositories/laka15308
Languages
English
Intermediate (B1)
B1
Sinhala
Native
Native
Finnish
Beginner (A1)
A1
References
References available upon request.
Timeline
Senior Information Security Engineer
IFS
01.2022 - 01.2025
Network Specialist
HCL
01.2021 - 01.2022
Junior Executive Assistant - Data Centre Operator
Commercial Bank of Ceylon PLC
01.2013 - 01.2021
Master of Science (MSc) - Artificial Intelligence & Data Engineering
University of Vaasa
Bachelor of Science (BSc) - Cyber Security (First Class Honours)
University of Gloucestershire