B
2020 — 2022
Bachelor of Science (Cyber Security)
Edith Cowan University
Over deze freelancer
Penetration Tester & Application Security Specialist | OSEP · OSWE
I’m a penetration tester with nearly five years of hands-on experience helping companies find and fix security weaknesses before attackers do. I test web applications, APIs, internal and external networks, Active Directory, and cloud environments (AWS and Azure), and I also do white-box source code reviews.
My testing is manual-first. I go beyond scanner output to find business logic flaws, broken access control, and chained attacks, and I prove their real impact. Every engagement ends with a clear report covering CVSS risk ratings, business impact, and practical steps your developers can follow, and I can retest to confirm the fixes.
I hold eight OffSec certifications, including the OSEP (advanced penetration testing, beyond the OSCP) and the OSWE (advanced web application security). I’ve worked for a cybersecurity consultancy and for enterprise clients such as Wiley.
I work remotely from Sri Lanka, in English, on a project basis. Sri Lanka is 3.5–4.5 hours ahead of the Netherlands, so it’s easy to overlap with Dutch working hours.
Opleiding
Werk & Ervaring
A
01-02-2026 — heden
Application Security Engineer / Penetration Tester
Virtusa
I lead penetration tests for enterprise clients, including Wiley, across web applications, APIs, internal and external networks, Active Directory, and cloud (AWS / Azure). I do manual exploitation, white-box source code review, and SAST/DAST in CI/CD pipelines, write reports with CVSS ratings and practical fixes, and retest to confirm issues are closed. I also build Python, Bash, and PowerShell tooling and mentor junior engineers.
A
01-12-2024 — 01-02-2026
Application Security Engineer / Penetration Tester
Wiley
Penetration testing of web applications and APIs, secure code review and threat modelling, and SAST/DAST (Checkmarx, OWASP ZAP) built into CI/CD pipelines. Wrote detailed reports, presented findings to development leads, and retested fixes.
C
01-01-2022 — 01-12-2024
Cybersecurity Engineer (Penetration Tester)
Scybers
Black-box and white-box penetration testing for consultancy clients across web applications, APIs, and internal and external networks, including Active Directory privilege escalation. API and wireless testing, phishing simulations, and security awareness training. Contributed to testing methodologies and report templates, and mentored junior testers.
Certificeringen
O
2026
OffSec Experienced Penetration Tester (OSEP)
O
2026
OffSec Web Expert (OSWE)
O
2026
OffSec Web Assessor (OSWA)
O
2026
OffSec Wireless Professional (OSWP)
O
2026
OffSec Defense Analyst (OSDA)
O
2026
OffSec Certified CyberCore (OSCC-SEC)
O
2025
OffSec Incident Responder (OSIR)
O
2025
OffSec Threat Hunter (OSTH)
Portfolio
Reviews
5 Sterren
0%
4 Sterren
0%
3 Sterren
0%
2 Sterren
0%
1 Sterren
0%
€ 75 / uur
-
Locatie Amsterdam
-
Categorie Development & ITAI Services
-
Geverifieerd Email
-
Lid Sinds 03-11-2026