MenukaDeshan
Ethical hacker · Pentester · Full-stack developer
Sri Lanka
I break systems on purpose — then rebuild them so they hold when it actually counts.
// 001 — Who you're hiring
Four years spent on both sides of the same problem — running the systems, then proving where they give.
- 4
- years experience
- 20+
- projects complete
- 40+
- certifications
- Top 50%
- on HackTheBox
// tech arsenal
// 002 — Track record
Four years of moving between the two sides of the same problem — administering the systems, then testing whether they hold.
- Sep 2025 — Present
Associate IT Administrator
Rainco (Pvt) Ltd/Employment
Managing enterprise IT systems and designing WhatsApp-based support automation that cut ticket response times.
- Feb 2025 — Aug 2025
IT Intern
Rainco (Pvt) Ltd/Employment
Supported daily IT operations, system monitoring, and hardware/software troubleshooting across branches.
- 2021 — 2025
Higher National Diploma in IT
SLIATE/Education
Software development, networking, and information systems management with hands-on lab and project work.
- 2023 — 2024
Full Stack Developer (Trainee)
University of Moratuwa/Education
Intensive programme covering the full software development lifecycle and modern web stacks.
// 003 — Credentials on file
Every credential here is independently verifiable. No self-assessed badges, no course completions dressed up as qualifications.
// 004 — Engineering & security operations
Four practices with more overlap than they look — the same discipline applied at different layers of the stack.
Full-Stack Developer
Fast, dynamic web applications with modern frameworks, robust APIs, and seamless UX.
Vulnerability & Recon
Structured reconnaissance and exploitation testing that finds the gap before someone else does.
Automated Tooling & Scripts
Bespoke automation that removes the repetitive work — monitoring, reporting, and response.
Shopify Partner
Custom Shopify apps and storefront work, from carrier rate logic to checkout extensions.
// 005 — Selected work
Security tooling, automation, and commerce systems — built to run in production, not to sit in a repo.
Security / Infrastructure/2025
Security Operations Home Lab
A self-built SOC environment — Wazuh SIEM watching a segmented network behind OPNsense, with real telemetry from Windows and Linux hosts instead of a lab dataset.
More details ↗
- Wazuh
- OPNsense
- TrueNAS
- Ubuntu Server
- Zabbix
Web / Full-stack/2026
St4sh
A personal media tracker born the day TV Time shut down — episode-level progress for shows, plus a full inventory of the movies and games in the stash, which device they live on, and what's backed up.
More details ↗
- Next.js
- TypeScript
- TMDB API
- IGDB API
Web/2026
HNDIT Website
A modern web home for the Higher National Diploma in IT at ATI Dehiwala — courses, events, news, and a student portal for the programme I graduated from.
More details ↗
- React
- HTML
- CSS
- Vercel
ProjectGizmo
In development
