Eroshan Weerathunga

Developed a vulnerability and penetration testing framework for the GE Grid Automation product portfolio. I identified vulnerabilities early in their development cycle. I developed threat models for substation automation and substation protection devices. Wurldtech Achilles, Mu Dynamics, and Nessus tests were used to evaluate product cybersecurity attack tolerance. I designed and executed penetration testing on OT devices to identify product security vulnerabilities. I also provided vulnerability remediation actions to improve product cybersecurity maturity.

Delivered threat risk assessment (TRA) that aims to identify related security risks for the healthcare navigation systems and developed recommendations to address identified risks. This TRA assessed the high inherent risks of the healthcare navigation environment for vulnerabilities examined and potential threats associated with those vulnerabilities and evaluated the current residual risk to be addressed. Key TRA activities include assets identification and valuation, threat assessment, vulnerability review, risk assessment, and recommendations. The TRA report I created helped the client understand the various threats to the healthcare navigation system, determining the level of risk these systems are exposed to and recommending the appropriate level of protection.