Senior SOC & Security Engineer
Resume:
Sachithi Sandeshi
Cyber Security Engineer
Personal details
Sachithi Sandeshi
************@*****.***
*/***, *** ****, ******* Estate,
Gamunupura 1st Lane,
February 9, 1998
linkedin.com/in/sachithi-
sandeshi-34121a18b
Skills
Solid experience and knowledge with
Linux administration: Kali, Ubuntu,
RHEL 8.
Vulnerability Assessment: Conducting
regular vulnerability assessments,
Penetration testing Identifying and
addressing security weaknesses
Network Security: Firewall
configuration and management,
Intrusion detection and prevention
systems (IDPS), Network monitoring
and traffic analysis
Security Awareness and Training:
Conducting security awareness
programs, Educating personnel about
information security best practices
Security Tools and Technologies:
Nessus, Nikto, Nmap, Burp Suite,
I consent to the processing of my personal data for the purpose of recruitment for the position to which I am applying.
Profile
Dedicated and highly skilled Cyber Security Engineer with a proven track record of safeguarding organizations from evolving cyber threats. Possessing a comprehensive understanding of penetration testing, and vulnerability assessment. My experience includes mitigating risks, responding to incidents, and ensuring compliance with industry regulations. Adept at conducting security audits, creating incident response plans, and providing employee training to enhance organizational resilience. With a passion for staying ahead of emerging threats and a commitment to continuous learning, I am ready to fortify your organization's cyber defenses and maintain the highest level of data integrity and confidentiality. Professional Experience
Trainee Information Security Analyst Feb 2021 - Nov 2021 Development Lotteries Board
Conducted vulnerability assessments and identified potential security weaknesses in the company's systems.
Supported the implementation of security policies and procedures to ensure compliance with industry standards and regulations. Worked closely with the IT team to patch and update systems in a timely manner to address security vulnerabilities.
Collaborated with team members to document and maintain security documentation and incident reports.
Contributed to incident response efforts, including analyzing security breaches and recommending mitigation strategies.
Participated in security awareness programs to educate employees on best practices for data protection and information security. Worked on the documentation and maintenance of security reports, and security documentation.
Associate Cyber Security Engineer Dec 2021 - Mar 2024 Sri Lanka Air Force Cyber Operations Centre
Conducted real-time monitoring and analysis of network traffic to identify and respond to security threats and anomalies.
Assisted in the development and implementation of security measures and controls to protect critical military infrastructure. Worked alongside senior engineers to conduct regular vulnerability assessments and penetration tests to fortify cyber defenses in MOD, Presidential Secretariat Official sites and Government sites. Participated in incident response activities, investigating and mitigating security breaches and unauthorized access attempts. Stayed updated with the latest cyber threats and trends through continuous learning and research.
Contributed to security awareness initiatives and training programs to educate personnel about best practices in information security. Collaborated with cross-functional teams to ensure compliance with military and industry regulations and standards.
Maintained and updated security documentation, policies, and procedures in line with changing cyber threat landscapes.
Collaborated in the configuration and management of security technologies, including firewalls, and intrusion detection systems. OpenVas, Vega, Arbor, Sentinel
Documentation and Reporting:
Maintaining security documentation,
policies, and procedures, Creating
comprehensive incident reports
Team Collaboration: Collaborating
with cross-functional teams,
Coordinating personnel and resources
for cybersecurity operations
Incident Response: Investigating
security breaches, Implementing
incident mitigation strategies, Real-
time threat analysis and response
Languages
English
Sinhala
I consent to the processing of my personal data for the purpose of recruitment for the position to which I am applying.
Monitored and analyzed security alerts to detect and respond to security incidents, while maintaining comprehensive incident reports. Specialist - SOC Mar 2024 - Present
SCICOM Lanka (Pvt) Ltd
Monitored, analyzed, and responded to security events and incidents in real- time using SIEM tools (Sentinel).
Investigated alerts to identify potential threats and mitigate risks in compliance with organizational security policies.
Performed threat hunting to proactively detect advanced threats within the network.
Conducted root cause analysis and provided actionable recommendations to improve incident response processes.
Managed vulnerability assessments, patch management, and coordinated with teams for remediation.
Maintained up-to-date knowledge of emerging threats, vulnerabilities, and attack vectors to enhance detection and prevention capabilities. Conducted WiFi security scans to identify vulnerabilities, unauthorized access points, and misconfigurations.
Created and updated standard operating procedures (SOPs) for incident response and escalation processes.
Collaborated with cross-functional teams to implement and improve security measures.
Participated in PCI DSS audits, ensuring compliance with security standards and assisting in remediation of non-compliance issues. Provided detailed reporting and dashboards on security operations performance and trends.
Trained junior SOC analysts on tools, processes, and incident handling best practices.
Education
BSc (Hons) in Information Technology
Specializing in Cyber Security
Jun 2018 - Aug 2022
Sri Lanka Institute of Information Technology
Certificates
Microsoft Certified: Security Operations
Analyst Associate (SC 200)
Sep 2024
Credential ID: 3F86182720E7FC7A
Publications
Introducing a Voice Detection System for
Criminal Investigation Unit
International Journal of Advance Computational Engineering and Networking
(IJACEN)
I consent to the processing of my personal data for the purpose of recruitment for the position to which I am applying.
Extracurricular activities
Member 2010 - 2015
Sri Lankan Badminton Team
Games Captain 2016 - 2017
Sanghamittha Balika Vidyalaya, Galle
Badminton Team 2019 - 2021
Sri Lanka Institute of Information Technology
Secretary 2022
ISAACA - Sri Lanka Institute of Information Technology Badminton Defence Services 2022 - 2023
Sri Lanka Air Force
References
Ruwan Gamage
Wing Commander, Sri Lanka Air Force
+94-76-820*-***, *****.*****@*****.***
Sanjaya Bentotage
Chief Architect, CingleVue International
+94-71-403*-***, *******.*********@*********.***
Declaration
I solemnly declare that the information stated above is true and correct to the best of my belief.
Kaduwela
Contact this candidate