Ravindu FernandoApplication Security Consultant

Locations · 5 core markets

Based in Colombo. Close enough to matter.

Most of the work is evidence, interviews and analysis, which runs well remotely. I travel for the moments that need a room: kick-offs, workshops and the findings read-out.

ColomboMaldivesIndiaBangladeshUAESaudi ArabiaSingapore & MalaysiaAustralia
Based in Colombo · on-site or remote across South Asia, the GCC and APAC

Markets

How engagements run in each market.

  • South Asia · ColomboSri LankaOpen

    I am based in Colombo, so Sri Lankan banks, insurers, telcos and groups get me in the room: assessing what you run, then ranking what to fix first.

    • Colombo is home base, so kick-offs, interviews and workshops happen in your office by default.
    • Follow-ups, evidence reviews and teams outside Colombo run remotely when travel adds nothing.
  • South Asia · MaléMaldivesOpen

    For Maldivian banks, payment providers and agencies, I assess the apps and APIs customers depend on, remotely and in Malé, then rank the fixes that matter.

    • A short flight from Colombo, so workshops and key phases can run in Malé without long lead times.
    • Malé is half an hour behind Colombo, so the whole working day overlaps for calls and reviews.
    Shared working hoursOn Malé time
    8.5hours of overlap
    every working day
    Your team · Malé09:00–18:00
    Me · Colombo08:30–17:30
  • GCC · DubaiUAEOpen

    From Colombo, 90 minutes ahead, I assess your apps, APIs and edge controls remotely, and join you in the UAE for the workshops that need a room.

    • Visits to Dubai or Abu Dhabi for kick-offs, workshops and findings, planned into the scope.
    • Remote-first: the UAE is 90 minutes behind Colombo, so almost the whole working day overlaps.
    Shared working hoursOn Dubai time
    7.5hours of overlap
    every working day
    Your team · Dubai09:00–18:00
    Me · Colombo07:30–16:30
  • GCC · RiyadhSaudi ArabiaOpen

    I assess your web and mobile apps, APIs and edge controls remotely from Colombo, visit for the workshops that matter, and map every finding to your controls.

    • Visits to Riyadh or Jeddah for kick-offs, workshops and key phases, booked into the scope in advance.
    • Remote-first: Riyadh is 2.5 hours behind Colombo, and Monday to Thursday is the shared working week.
    Shared working hoursOn Riyadh time
    6.5hours of overlap
    every working day
    Your team · Riyadh09:00–18:00
    Me · Colombo06:30–15:30
  • APAC · SydneyAustraliaOpen

    I assess your apps, APIs and edge controls remotely from Colombo, with my mornings overlapping your afternoons, and travel for the workshops that need it.

    • On site in Sydney or Melbourne for a kick-off or board workshop where it adds value, agreed upfront.
    • Remote-first: my Colombo morning is your Sydney afternoon, giving three to four shared hours a day.
    Shared working hoursOn Sydney time · Daylight saving Oct–Apr: UTC+11, 5.5 hours ahead of Colombo
    4.5hours of overlap
    every working day
    Your team · Sydney09:00–18:00
    Me · Colombo13:30–22:30

Free 30-minute call

Let’s find your gaps before someone else does.

Tell me what you are protecting. You will leave the call knowing whether an assessment makes sense and what it would cover.