Cybersecurity undergraduate and web developer based in Sri Lanka, passionate about penetration testing, VAPT, and ethical hacking.
Hey There!
I help businesses find and fix security weaknesses before attackers do — through manual penetration testing, vulnerability assessments and secure web development. CEH-certified, with 3+ years running real IT infrastructure in Sri Lanka.
Hiring? Download my CVWho I Am
Cyber security and network engineer with hands-on experience in penetration testing, VAPT, Active Directory and secure web development. By day I work as an Information Security Specialist at Melstacorp PLC; the rest of the time I’m breaking into machines on HackTheBox and writing up what I learn.
More About Me
Services
Web application and network penetration testing combined with a full vulnerability assessment — from recon and exploitation to a clear, risk-rated report that both your developers and your management can act on.
PHP, MySQL and JavaScript websites and internal tools built security-first — like the inventory system now running at Timex Garments.
View Service DetailsActive Directory, firewall and endpoint reviews based on real infrastructure work — finding misconfigurations, open ports and weak protocols before attackers do.
View Service DetailsSimulating real-world human-layer attacks — phishing campaigns, pretexting and OSINT-driven reconnaissance — to show where your people and public footprint expose the organisation.
Tell me what you need tested or built. The first scoping call is free, and you’ll get a clear plan before any work starts.
Case Studies
Experience & Skills
Career Timeline
Melstacorp PLC
Information security role at Melstacorp PLC, a diversified group listed on the Colombo Stock Exchange — helping protect the organisation's systems, users and data.
Timex Garments (PVT) Ltd. · Promoted from Staff Officer IT
Led IT operations across the organisation — managing Active Directory, network infrastructure, servers, and security. Implemented new AD, File Server, Web Server, and Kaspersky Server environments. Developed an internal Inventory Management System.
MAS Intimates (PVT) Ltd. · via Eureka Technology Partners
On-site IT support for one of Sri Lanka's largest apparel manufacturers — troubleshooting hardware, software, and network issues across a large multi-department environment.
Commercial Bank (PVT) Ltd. · via Zeal (Pvt) Ltd
Technical support in a high-security banking environment — maintaining systems, resolving incidents, and ensuring uptime across branch operations with strict compliance standards.
Highlights
Academic Background
Esoft Metro Campus
Advanced program covering offensive and defensive cybersecurity, network security architecture, ethical hacking, digital forensics, and secure software development practices.
CICRA Campus
NVQ Level 5 qualification covering cybersecurity fundamentals, vulnerability assessment, network defence, and penetration testing methodologies.
CICRA Campus
NVQ Level 4 — Windows Server administration, Active Directory, network protocols, and enterprise infrastructure management.
CICRA Campus
Foundation certificate establishing core skills in ethical hacking, security testing, and vulnerability identification.
Certifications
Target Certs
Languages
Security Skills
Development & Infrastructure
Testimonials
Software Engineer
Nethra delivered an excellent web solution with strong attention to security. The site was clean, fast, and well-coded. Highly recommend!
