<security_cloud_qa_profile>

WARUNI BAHAR

</security_cloud_qa_profile>

$ Security-Focused IT Professional | QA, Cloud & Cyber Security Background _

Open to Security Operations, Security Analyst, Cloud Security, QA and API Testing Opportunities

FOCUS
Security Operations
PLATFORM
Cloud & Security
SPECIALTY
QA Investigation + Cloud Security

[ ABOUT_ME ]

<profile>

Waruni Bahar - QA Engineer with Cloud and Security Experience

Security-focused IT professional with QA engineering experience across Agile software delivery, API validation, backend data verification, defect analysis and release support, now expanding expertise in Cloud Computing and Cyber Security.

I bring a strong analytical and investigation mindset developed through functional testing, API validation using Postman, SQL-based data verification, defect analysis and cross-functional collaboration with developers, product owners and stakeholders.

Through hands-on projects and labs in AWS, Microsoft Azure and Fortinet, I have worked with IAM, VPCs, public and private networking, access control, security groups, firewall concepts, secure hosting, monitoring and cloud administration scenarios. I am particularly interested in Security Operations, cloud security, vulnerability analysis, incident response support, and technology environments where I can combine my QA background with growing cyber security capability.

</profile>

Security-Aware QA Experience

Agile testing, API validation, backend verification and issue investigation across product teams

Cloud & Security Projects

AWS, Azure and Fortinet project work covering IAM, networking, access control, monitoring and secure hosting

SECURITY FOCUS AREAS

  • Cloud Security
  • Identity & Access Management (IAM)
  • Network Security
  • Secure Infrastructure
  • Security Monitoring
  • Access Control

Security Operations Growth

Active learning path across security operations, cloud security, networking and cyber security fundamentals

CURRENTLY LEARNING

  • CompTIA Security+
  • Security Operations Fundamentals
  • Cloud Security Best Practices
  • Network Traffic Analysis
  • AWS Security Concepts

[ SECURITY_AND_TECHNICAL_SKILLS ]

SECURITY OPERATIONS

Security Monitoring Fundamentals
Threat Intelligence Research
Vulnerability Analysis Concepts
Incident Response Fundamentals

CLOUD & CYBER SECURITY

AWS & Azure Environments
IAM, Roles & Access Control
VPCs, Subnets & Security Groups
Firewall Rules & Network Security

CLOUD COMPUTING

EC2, Azure VM & Secure Hosting
Storage Services & Availability Concepts
Route Tables, Gateways & Networking
Monitoring, Governance & Administration

QA & TESTING

Functional, Regression, Smoke & UAT Testing
API Testing (Postman)
Java, TestNG, Maven & Cucumber Exposure
Defect Tracking, JIRA & Release Validation

TOOLS & TECHNOLOGIES

JIRA Postman API Testing SQL TestNG Java Cucumber (BDD) Maven Git Confluence Amazon Web Services (AWS) Microsoft Azure VPC EC2 S3 IAM Security Groups Virtual Machines Access Control Firewall Rules Network Security TCP/IP DNS Agile/Scrum

[ CERTIFICATIONS & LEARNING ]

Yoobee Colleges Badge

Diploma in Cloud Computing & Cyber Security

In Progress - August 2025 to Present

Level 6 diploma focused on cloud platforms, cybersecurity principles, networking, infrastructure, risk management, and practical security concepts.

AWS Academy Graduate Badge

AWS Academy Graduate – Cloud Foundations

Issued October 2025

AWS Academy training covering core cloud concepts, AWS global infrastructure, cloud services, security, architecture, pricing, and support models.

View Credential →
ISC2 CC Badge

ISC2 CC Domain Training

Issued February 2026

Cybersecurity domain training covering security principles, network security, access control, risk awareness, and foundational security practices.

View Credential →
CompTIA Security+ Badge

CompTIA Security+ Learning

In Progress - March 2026 to Present

Security+ aligned learning covering governance, risk, compliance, identity access, vulnerability management, incident response, cryptography, and infrastructure protection.

View Skillsoft Credentials →
CompTIA Tech+ Badge

CompTIA Tech+ / IT Fundamentals Learning

Completed - Issued May 2026

Foundational IT learning covering essential IT knowledge, operating systems, networking concepts, cloud computing, databases, software components, and troubleshooting.

View Skillsoft Credentials →
ISTQB Badge

ISTQB Certified Tester

Certified - August 2023

Foundation level software testing certification covering testing principles, test design techniques, defect management, and structured QA practices.

University College Dublin Badge

BSc in Management Information Systems

Completed - 2011

Degree covering information systems, business technology, databases, systems analysis, management concepts, and IT-enabled business solutions.

[ EXPERIENCE ]

September 2025 - Present

Technical Upskilling & Professional Development

Professional Development

  • Currently pursuing a Diploma in Cloud Computing & Cyber Security
  • Building hands-on experience with AWS and Microsoft Azure through labs and technical projects
  • Developing knowledge in security operations, incident response, threat awareness and vulnerability management
  • Currently working toward CompTIA Security+ while continuing practical security and cloud learning
CompTIA ITF+ Cloud Computing Cyber Security AWS Azure
September 2024 - August 2025

QA Engineer

Thiru Solutions Limited

  • Worked with an early-stage product team developing a fitness monitoring and performance improvement platform
  • Performed functional, regression and exploratory testing across evolving product features
  • Assisted with requirement analysis, research, product validation and usability improvements
  • Supported testing of Polar fitness data integrations, API workflows and backend data verification
  • Collaborated with developers to validate cloud-connected application behaviour, data flows and security-related considerations
Functional Testing Exploratory Testing Product Validation Agile Collaboration
July 2023 - September 2024

QA Engineer (Freelancing)

Freelance Projects

  • Provided freelance QA support for small-scale web and mobile projects
  • Performed manual, regression, and exploratory testing
  • Prepared and executed test cases based on requirements
  • Logged and tracked defects and supported issue resolution
  • Assisted with requirement analysis and usability validation
  • Collaborated with developers and stakeholders during testing cycles
Manual Testing Regression Testing Exploratory Testing Usability Validation
June 2021 - July 2023

QA Engineer (Contract)

DHV Consulting, Auckland, New Zealand

  • Acted as the sole QA engineer across multiple Agile teams, responsible for end-to-end testing, quality assurance, and release support
  • Worked across multiple Agile teams supporting testing activities for web and backend systems
  • Designed and executed functional, regression, API, and end-to-end test cases
  • Used Postman for API validation and SQL for backend data verification
  • Contributed to automation testing activities using Java, TestNG, Maven, and Cucumber
  • Logged and tracked defects using JIRA and collaborated closely with developers and product owners
  • Supported UAT, release validation, and production verification activities
API Testing Postman SQL Java + TestNG Agile/Scrum
August 2010 - September 2013

QA Engineer

ICT Internet Presence (ICTIP) - Colombo, Sri Lanka

  • Contributed as part of a QA team delivering testing support across multiple applications and client projects
  • Performed functional, regression and performance testing across multiple applications
  • Designed and executed test cases based on project requirements and business workflows
  • Reported and retested defects, working with developers and analysts to support quality releases
Functional Testing Regression Testing Test Planning Agile

[ PROJECTS ]

Fortinet Network Security & Firewall Configuration

Practical network security project demonstrating Fortinet FortiGate firewall configuration, security policy design and protected network segmentation across LAN, WAN and DMZ zones. Includes documented architecture decisions, proof-of-concept implementations, traffic control rules, and a video walkthrough showing security controls, policy enforcement and blocked-versus-allowed scenarios in action.

Fortinet Network Security Firewall Security Policies

AWS Security & IAM Implementation

Hands-on AWS security implementation covering IAM users, groups, roles and permission boundaries, VPC security design, security groups and least-privilege access control. Focused on securing cloud workloads through network protection, encrypted storage, credential management and audit logging, while applying AWS security best practices across realistic deployment and incident-response scenarios.

AWS Security IAM VPC Encryption

Cloud Networking & Infrastructure Security

Scenario-based AWS implementation focused on VPCs, public and private subnets, route tables, internet and NAT gateways, and secure network segmentation. Emphasises practical cloud networking, traffic flow control, defence-in-depth infrastructure design, and clear deployment documentation covering IP planning, connectivity paths, security groups and hardened administrator access.

AWS Cloud Architecture Scalability Cost Optimization

Secure Cloud Architecture & Deployment Scenarios

AWS-focused architecture exercise combining foundational cloud concepts with practical deployment choices across compute, storage, high availability, monitoring and administration. Demonstrates secure design thinking, right-sized service selection, resilience planning and cost-aware decisions, backed by written justification of trade-offs, security considerations and recommended AWS service configurations.

AWS Cloud Concepts EC2 S3

Azure Cloud Infrastructure Fundamentals

Azure project work covering virtual machines, storage accounts, virtual networks, network security groups and secure resource management. Demonstrates practical Azure service administration, role-based access, resource tagging and cloud infrastructure fundamentals through guided implementation tasks, alongside documented configuration steps, verification screenshots and lessons learned from hardening a multi-resource Azure environment.

Azure Virtual Machines Storage Networking

Azure Public Cloud Administration

Azure administration project focused on user and identity management, resource provisioning, activity monitoring, governance policies and operational oversight. Highlights practical cloud administration activities aligned with secure, well-governed public cloud environments, including role assignments, access reviews, cost visibility, alerting and documented procedures for maintaining a healthy production-ready Azure tenant.

Azure Cloud Administration Governance Monitoring

[ GET_IN_TOUCH ]

<contact>

I am open to Security Operations Analyst, Security Analyst, Cloud Security, QA and API Testing opportunities where I can combine my QA investigation background with growing cloud and cyber security capability.

MOBILE
022 049 7550
LOCATION
Auckland, New Zealand



</contact>

Available for Opportunities

Ready to Connect?

Let's discuss how I can contribute across security operations, cloud security, QA, API testing and modern technology delivery teams.

SEND MESSAGE
Response Time
Within 24 hours
Work Preference
Remote/Hybrid