
Nipuna Kaweya
AppSec Engineer, Secure Code Review and Vibe Coded App Cleanup
Competenze

Consulta i miei servizi


Esperienza lavorativa
Independent Security Researcher
Self Employed • Lavoratore autonomo
May 2025 - Present • 1 yr 5 mos
I build and research security tools and publish my findings. I have published 5 research papers at international conferences. My work includes an AI-powered intrusion prevention system (IPS), an AI security agent SaaS application, and a WordPress security plugin. My current research looks at how attackers carry out poisoning attacks on LLM agents and how to defend against them.
Application Security Engineer
CYRUS Codelabs • Part time
May 2024 - Present • 2 yrs 5 mos
Joined as a Security Intern and was promoted to Application Security Engineer. Led threat modelling, security reviews, and risk management, reducing critical vulnerabilities by 15%. Performed secure code reviews, vulnerability assessments, and security testing against OWASP Top 10 risks. Automated SAST in CI/CD pipelines, set up encrypted backups, supported ISO 27001 and GDPR audits, and mentored interns.
Intern Software Engineer
Abacus Technologies • Full time
Feb 2024 - May 2024 • 3 mos
Built ERP and full-stack features with Next.js and Spring Boot, applying secure coding practices and fixing security-related bugs. Implemented input validation and authentication checks to strengthen application security. Worked with relational databases and Git, collaborating with the team to improve application stability.