Ashan Kobewatta

Information Security Analyst @MEC

Vancouver, BC, CA

MEC, headquartered in Vancouver, is a renowned company in the outdoor equipment industry. In the role of Information Security Analyst, I have been instrumental in securing and enhancing the integrity of our information systems. I am currently performing the following responsibilities for the MEC Infosec team:• Optimized threat detection by managing Datadog SIEM, fine-tuning alerts, and developing custom detection rules to reduce false positives and improve response efficiency.• Monitored and triaged security events using LogRhythm and Microsoft Defender, ensuring timely and effective incident response across the environment.• Strengthened cloud security posture by managing Azure security configurations, implementing conditional access policies, and ensuring compliance with industry best practices.• Led endpoint security hardening efforts using Microsoft Intune and Jamf Pro, including MacOS hardening and Windows device compliance policies.• Developed security automation tools and scripts using Python to streamline repetitive tasks and enhance SOC workflow efficiency.• Managed EDR and VA tools, including Sophos for endpoint detection and InsightVM for vulnerability scanning, remediation tracking, and reporting.• Conducted IT forensics investigations and email threat analysis using Proofpoint, identifying phishing campaigns and mitigating targeted attacks.• Automated incident response and operational tasks through scripting and integration with existing security tools, reducing manual overhead.• Collaborated with cross-functional teams and external vendors to resolve high-priority incidents and improve overall security operations.• Maintained and documented security protocols, playbooks, and standard operating procedures to support continuous improvement and knowledge sharing.

SLIIT

Bachelor of Science (BSc), Cyber Security