Cybersecurity Engineer & Full-Stack Developer
Building secure, intelligent, and scalable digital systems at the intersection of cybersecurity, software engineering, artificial intelligence, and blockchain.
"I don't just write code — I build systems that think, protect, and scale."
I'm Nipuna Prabashwara — a Cybersecurity Engineer, Full-Stack Developer, and AI/ML Enthusiast based in Sri Lanka. I specialise in building systems that are not only powerful and scalable, but resilient and intelligent by design.
Currently working as a Cybersecurity Engineer at Cyrus Codelabs, I lead application security initiatives — hardening APIs, conducting vulnerability assessments, and building real-time threat detection systems that protect production environments. Before that, I gained industry experience as a Software Engineering Intern at Abacus PVT LTD, working on backend systems and scalable APIs.
Alongside my full-time role, I have been freelancing since 2022 — delivering custom web and mobile applications, AI automation tools, and secure dashboards for clients across industries worldwide. My work sits at the intersection of cybersecurity, software engineering, artificial intelligence, and blockchain.
I am currently pursuing a BEng (Hons) in Software Engineering at the University of Westminster, combining academic rigour with real-world engineering practice.
Application security, penetration testing, vulnerability assessment, API hardening, and real-time threat detection and prevention systems.
End-to-end web and mobile application development with a focus on scalability, performance optimisation, and security-first architecture.
Designing intelligent systems for security analytics, anomaly detection, and predictive modelling — bridging AI with real-world security challenges.
Leveraging decentralised architecture to build tamper-resistant, transparent systems that complement security-by-design principles.
Designing and optimising backend infrastructure — scalable APIs, database architecture, microservices, and performance-critical server logic.
Since 2022, delivering custom digital products for clients worldwide — balancing requirements, timelines, and technical quality with precision.
Leading application security at Cyrus Codelabs — hardening APIs, building real-time threat detection and prevention systems, conducting vulnerability assessments, and enforcing security-by-design across production environments.
Gained hands-on experience in penetration testing, vulnerability assessment, and secure coding at Cyrus Codelabs. Contributed to internal security audits, threat modelling, and reporting frameworks across live projects.
Worked at Abacus PVT LTD on backend systems, scalable REST APIs, and database optimisation — contributing to real-world applications with a focus on clean architecture and performance.
Delivered custom web and mobile applications for clients globally, with a consistent focus on scalability, performance, and security. Projects span e-commerce platforms, SaaS tools, and secure dashboards.
A real-time AI-powered intrusion prevention system that detects and blocks malicious traffic — including SQL injection, brute-force attacks, and abnormal user behaviour — before it reaches production systems.
A machine learning-based system for detecting and classifying phishing URLs in real time, protecting users from malicious websites through intelligent pattern recognition and threat scoring.
A secure healthcare platform that integrates cybersecurity principles with blockchain architecture to deliver tamper-resistant patient data management and enhanced access control.
An intelligent conversational agent integrated with WhatsApp that interacts with customers, processes orders, handles queries, and automates business workflows using natural language AI.
A pre-WordPress Web Application Firewall and Intrusion Prevention System that intercepts and scores HTTP requests before the CMS loads — blocking SQLi, XSS, brute-force, file upload attacks, and bot traffic in real time. Pro tier adds AI/ML anomaly detection via ONNX and cloud threat intelligence sync.
I'm open to full-time roles, consulting engagements, and collaborative projects at the intersection of security and engineering. If you have a challenge worth solving, I'd like to hear about it.