Induwara Nanayakkara
Engineer – Cloud and AppSec
Sri Lanka
induwarananayakkara26@gmail.com
linkedin.com/in/induwara-nanayakkara-6953a422b
github.com/induwaran
Professional Summary
Engineer specializing in cloud security, application security, and
DevSecOps, with hands-on experience implementing enterprise security
solutions, securing cloud and application environments across Microsoft
Azure and AWS, and integrating security controls into software development
and CI/CD workflows.
Core Technical Areas
Application Security
SASTDASTSCARASP
Mobile Application SecurityApplication Security Testing
Cloud Security
CSPMCloud SecurityCloud Workload Security
Microsoft AzureAWS
DevSecOps
CI/CD SecurityGitHub Integration
Security AutomationSecure Software Delivery
Security Engineering
Vulnerability ManagementSecurity Testing
Infrastructure SecurityContainer SecurityIaC Security
Hands-On Platforms
VeracodeWizPrisma Cloud
ZimperiumPenteraTenable
Experience
Engineer – Cloud and AppSec
May 2023 – Present
Innov8 Pvt Ltd · Sri Lanka
- Implement and manage DevSecOps and cloud security solutions across enterprise environments.
- Perform application security assessments using SAST and DAST methodologies.
- Implement and administer security platforms including Veracode, Prisma Cloud, and Zimperium.
- Secure cloud environments and workloads across Microsoft Azure and AWS.
- Integrate security controls and scanning tools into GitHub and CI/CD workflows.
- Monitor and improve cloud security posture management (CSPM) and vulnerability management processes.
- Conduct security validations and provide recommendations to improve application and cloud security posture.
- Collaborate with development, infrastructure, and security teams, automating security processes within development pipelines.
IT Risk and Security Operations
Allianz Insurance Lanka Limited
- Experience gained in IT Risk and Security Operations within a regulated insurance environment.
Selected Engagements
- Large-Scale CSPM Implementation
- Delivered large-scale cloud security initiatives focused on CSPM and cloud security posture improvement for enterprise environments.
- Code Security & CI/CD Security Implementation
- Implemented code security and CI/CD security capabilities for enterprise environments, integrating scanning into delivery pipelines.
- Enterprise RASP Implementation
- Supported enterprise RASP implementation for a financial-sector organization.
- Application Security POCs
- Conducted successful application security proof-of-concept engagements across multiple BFSI organizations.
Personal Labs & Experiments
Independent learning projects (not professional engagements): experimentation with
OpenCode, Ollama, Python, Git/GitHub workflows, Docker, DevSecOps pipelines, and
security automation.
Education
BSc (Hons) Computer Networks and Security
Wrexham Glyndŵr University