<security_cloud_qa_profile>

WARUNI BAHAR

</security_cloud_qa_profile>

$ Cybersecurity Professional | CompTIA Security+ | Cloud Security _

Open to Cybersecurity Analyst, Security Operations Analyst and Cloud Security Opportunities

FOCUS
Security Operations
PLATFORM
Cloud & Security
CERTIFIED
CompTIA Security+
Verify credential ↗

[ ABOUT_ME ]

<profile>

Waruni Bahar - QA Engineer with Cloud and Security Experience

CompTIA Security+ certified cybersecurity professional with a Grade A Level 6 Diploma in Cloud Computing and Cyber Security and professional QA engineering experience across Agile delivery, API and data validation, defect analysis and release support.

My interest in application security began at Thiru Solutions, where I supported vulnerability assessment checks alongside QA testing for a fitness monitoring platform. That experience led me to focused cybersecurity study and practical projects in cloud and network security.

Through hands-on projects and labs in AWS, Microsoft Azure and Fortinet, I have worked with IAM, VPCs, public and private networking, access control, security groups, firewall concepts, secure hosting, monitoring and cloud administration scenarios. I am particularly interested in Security Operations, cloud security, vulnerability analysis, incident response support, and technology environments where I can combine my QA background with growing cyber security capability.

</profile>

Security-Aware QA Experience

Agile testing, API validation, backend verification and issue investigation across product teams

Cloud & Security Projects

AWS, Azure and Fortinet project work covering IAM, networking, access control, monitoring and secure hosting

SECURITY FOCUS AREAS

  • Cloud Security
  • Identity & Access Management (IAM)
  • Network Security
  • Secure Infrastructure
  • Security Monitoring
  • Access Control

Cybersecurity Credentials

CompTIA Security+ certified and completed a Level 6 cloud and cybersecurity diploma with Grade A in 2026

CREDENTIALS & FOCUS

  • CompTIA Security+ Certified
  • Level 6 Diploma — Grade A
  • Security Operations Fundamentals
  • Cloud Security Best Practices
  • Network Traffic Analysis
  • AWS Security Concepts

[ SECURITY_AND_TECHNICAL_SKILLS ]

SECURITY OPERATIONS

Security Monitoring Fundamentals
Threat Intelligence Research
Vulnerability Analysis Concepts
Incident Response Fundamentals

CLOUD & CYBER SECURITY

AWS & Azure Environments
IAM, Roles & Access Control
VPCs, Subnets & Security Groups
Firewall Rules & Network Security

CLOUD COMPUTING

EC2, Azure VM & Secure Hosting
Storage Services & Availability Concepts
Route Tables, Gateways & Networking
Monitoring, Governance & Administration

QA & TESTING

Functional, Regression, Smoke & UAT Testing
API Testing (Postman)
Java, TestNG, Maven & Cucumber Exposure
Defect Tracking, JIRA & Release Validation

TOOLS & TECHNOLOGIES

Fortinet FortiGate AWS IAM AWS VPC AWS Security Groups AWS EC2 AWS S3 Azure Virtual Networks (VNets) Azure Network Security Groups (NSGs) Azure RBAC Azure Virtual Machines Firewall Policies LAN / WAN / DMZ Segmentation TCP/IP DNS Encryption Access Control JIRA Postman API Testing SQL TestNG Java Cucumber (BDD) Maven Git Confluence Agile/Scrum

[ CERTIFICATIONS & LEARNING ]

CompTIA Security+ Badge

CompTIA Security+

Certified - September 2026

Industry certification covering core cybersecurity skills, including risk management, identity and access, vulnerability management, incident response and infrastructure security.

Verify Credential →
Yoobee Colleges Badge

Diploma in Cloud Computing and Cyber Security (Level 6)

Completed 2026 - Grade A

Yoobee Colleges diploma covering cloud platforms, cybersecurity principles, networking, infrastructure and risk management.

AWS Academy Graduate Badge

AWS Academy Graduate – Cloud Foundations

Issued October 2025

AWS Academy training covering core cloud concepts, AWS global infrastructure, cloud services, security, architecture, pricing, and support models.

View Credential →
ISC2 CC Badge

ISC2 CC Domain Training

Issued February 2026

Cybersecurity domain training covering security principles, network security, access control, risk awareness, and foundational security practices.

View Credential →
CompTIA Tech+ Badge

CompTIA Tech+ / IT Fundamentals Learning

Completed - Issued May 2026

Foundational IT learning covering essential IT knowledge, operating systems, networking concepts, cloud computing, databases, software components, and troubleshooting.

View Skillsoft Credentials →
ISTQB Badge

ISTQB Certified Tester

Certified - August 2023

Foundation level software testing certification covering testing principles, test design techniques, defect management, and structured QA practices.

University College Dublin Badge

BSc in Management Information Systems

Completed - 2011

Degree covering information systems, business technology, databases, systems analysis, management concepts, and IT-enabled business solutions.

[ EXPERIENCE ]

September 2025 - 2026

Cybersecurity Study & Professional Development

Professional Development

  • Completed the Level 6 Diploma in Cloud Computing and Cyber Security at Yoobee Colleges with Grade A in 2026
  • Earned CompTIA Security+ certification in September 2026
  • Built practical security skills through AWS, Azure and Fortinet academic projects, including firewall controls, network segmentation and encrypted VPN connectivity
CompTIA Security+ Cloud Computing Cyber Security AWS Azure
September 2024 - August 2025

QA Engineer

Thiru Solutions Limited

  • Worked with an early-stage product team developing a fitness monitoring and performance improvement platform
  • Supported vulnerability assessment checks as part of QA testing; this experience sparked an interest in application security and led to focused cybersecurity study
  • Performed functional, regression and exploratory testing across evolving product features
  • Assisted with requirement analysis, research, product validation and usability improvements
  • Supported testing of Polar fitness data integrations, API workflows and backend data verification
  • Collaborated with developers to validate cloud-connected application behaviour, data flows and security-related considerations
Functional Testing Exploratory Testing Product Validation Agile Collaboration
July 2023 - September 2024

QA Engineer (Freelancing)

Freelance Projects

  • Provided freelance QA support for small-scale web and mobile projects
  • Performed manual, regression, and exploratory testing
  • Prepared and executed test cases based on requirements
  • Logged and tracked defects and supported issue resolution
  • Assisted with requirement analysis and usability validation
  • Collaborated with developers and stakeholders during testing cycles
Manual Testing Regression Testing Exploratory Testing Usability Validation
June 2021 - July 2023

QA Engineer (Contract)

DHV Consulting, Auckland, New Zealand

  • Acted as the sole QA engineer across multiple Agile teams, responsible for end-to-end testing, quality assurance, and release support
  • Worked across multiple Agile teams supporting testing activities for web and backend systems
  • Designed and executed functional, regression, API, and end-to-end test cases
  • Used Postman for API validation and SQL for backend data verification
  • Contributed to automation testing activities using Java, TestNG, Maven, and Cucumber
  • Logged and tracked defects using JIRA and collaborated closely with developers and product owners
  • Supported UAT, release validation, and production verification activities
API Testing Postman SQL Java + TestNG Agile/Scrum
August 2010 - September 2013

QA Engineer

ICT Internet Presence (ICTIP) - Colombo, Sri Lanka

  • Contributed as part of a QA team delivering testing support across multiple applications and client projects
  • Performed functional, regression and performance testing across multiple applications
  • Designed and executed test cases based on project requirements and business workflows
  • Reported and retested defects, working with developers and analysts to support quality releases
Functional Testing Regression Testing Test Planning Agile

[ PROJECTS ]

Fortinet Network Security & Firewall Configuration

Practical network security project demonstrating Fortinet FortiGate firewall configuration, security policy design and protected network segmentation across LAN, WAN and DMZ zones. Includes documented architecture decisions, proof-of-concept implementations, traffic control rules, and a video walkthrough showing security controls, policy enforcement and blocked-versus-allowed scenarios in action.

Fortinet Network Security Firewall Security Policies

AWS Security & IAM Implementation

Hands-on AWS security implementation covering IAM users, groups, roles and permission boundaries, VPC security design, security groups and least-privilege access control. Focused on securing cloud workloads through network protection, encrypted storage, credential management and audit logging, while applying AWS security best practices across realistic deployment and incident-response scenarios.

AWS Security IAM VPC Encryption

Cloud Networking & Infrastructure Security

Scenario-based AWS implementation focused on VPCs, public and private subnets, route tables, internet and NAT gateways, and secure network segmentation. Emphasises practical cloud networking, traffic flow control, defence-in-depth infrastructure design, and clear deployment documentation covering IP planning, connectivity paths, security groups and hardened administrator access.

AWS Cloud Architecture Scalability Cost Optimization

Secure Cloud Architecture & Deployment Scenarios

AWS-focused architecture exercise combining foundational cloud concepts with practical deployment choices across compute, storage, high availability, monitoring and administration. Demonstrates secure design thinking, right-sized service selection, resilience planning and cost-aware decisions, backed by written justification of trade-offs, security considerations and recommended AWS service configurations.

AWS Cloud Concepts EC2 S3

Azure Cloud Infrastructure Fundamentals

Azure project work covering virtual machines, storage accounts, virtual networks, network security groups and secure resource management. Demonstrates practical Azure service administration, role-based access, resource tagging and cloud infrastructure fundamentals through guided implementation tasks, alongside documented configuration steps, verification screenshots and lessons learned from hardening a multi-resource Azure environment.

Azure Virtual Machines Storage Networking

Azure Public Cloud Administration

Azure administration project focused on user and identity management, resource provisioning, activity monitoring, governance policies and operational oversight. Highlights practical cloud administration activities aligned with secure, well-governed public cloud environments, including role assignments, access reviews, cost visibility, alerting and documented procedures for maintaining a healthy production-ready Azure tenant.

Azure Cloud Administration Governance Monitoring

[ GET_IN_TOUCH ]

<contact>

I am seeking cybersecurity opportunities in security operations, security analysis and cloud security, where I can apply my CompTIA Security+ certification, cloud security studies and technical investigation experience.

MOBILE
022 049 7550
LOCATION
Auckland, New Zealand



</contact>

Available for Opportunities

Ready to Connect?

Let's discuss how I can contribute to cybersecurity, security operations and cloud security teams, bringing a strong foundation in testing and technical investigation.

▶ SEND MESSAGE
Response Time
Within 24 hours
Work Preference
Remote/Hybrid