Samitha Madhusanka

- Lead and conduct penetration testing engagements for a diverse range of clients, including government agencies, and financial institutions.
- Develop and execute penetration testing methodologies tailored to clients' specific requirements and compliance standards, such as ISO 270001/2, PCI DSS and CBSL Cyber Resilience Framework
- Perform network penetration testing, web application assessments, wireless security testing, and social engineering engagements to identify and exploit vulnerabilities.
- Collaborate with cross-functional teams to analyze findings, prioritize remediation efforts, and provide actionable recommendations to improve security posture.
- Create detailed reports documenting findings, risk assessments, and remediation recommendations for stakeholders, including executive leadership and technical teams.
- Provide subject matter expertise and mentorship to junior penetration testers, contributing to their professional development and growth within the organization.

- Conducted penetration testing engagements for clients across various industries, including healthcare, e-commerce, and technology.
- Utilized a variety of tools and techniques to identify vulnerabilities in networks, applications, and systems, including Metasploit, Nmap, Burp Suite, and Kali Linux.
- Assisted in the development and enhancement of penetration testing methodologies, tools, and frameworks to improve efficiency and effectiveness.
- Presented findings and recommendations to clients in clear, non-technical language, facilitating understanding and collaboration between technical and non-technical stakeholders.
- Contributed to the continuous improvement of internal processes and procedures related to penetration testing and security assessment services.

- Conducting Vulnerability Assessments and Penetration Testing (VAPT) for Web, Mobile, Network, API

- Conducting Red Team Exercises

- Reviewing Application Source Code & firewall configuration

- Performing social engineering assessments

• Conducting Vulnerability Assessments and Penetration Testing (VAPT) for Web, Mobile, Network, API
• Conducting Red Team Exercises
• Reviewing Application Source Code & firewall configuration
• Performing social engineering assessments

• VAPT (web/Mobile/Network/API), source code review, Phishing Simulation, Firewall Rulebase Audit