// ATL @ WSO2 · Cybersecurity Enthusiast
GIGARA
Hettige
lon 79.85°Erole →
assoc. tech lead
SE yrs
5+
Cyber yrs
7+
Projects
100+
Hi, I'm Gigara. Software engineer and cybersecurity enthusiast building developer tools at WSO2.
Friends call me Giga. Five years at WSO2, now Associate Technical Lead. I work across our integration products. After hours I take on freelance builds for clients across Sri Lanka and abroad. Everything from simple marketing sites to enterprise platforms: e-learning systems, business management software, mobile apps.
Cybersecurity is the other half. Application security at work, a bit of bug bounty, the occasional real-world account-recovery case for friends.
Off-screen I lecture and supervise research at IIT, sing (Sangeeth Visharad), and produce the odd short film. The National ICT Award (NBQSA) came from earlier ML research.
Based in
Colombo, LK
Current
WSO2
Education
B.Eng First Class, Westminster
Award
NBQSA winner
The trail so far.
4 roles
2025 - Present
Colombo, Sri Lanka
Associate Technical Lead / WSO2
Lead developer experience work for the Ballerina and Micro Integrator products. Also the security manager for over ten Ballerina repos.
BallerinaDevExSecurityIntegration2023 - 2025
Senior Software Engineer / WSO2
Shipped the Ballerina and Micro Integrator VSCode extensions. Built a performance analyzer that forecasts latency and throughput for Ballerina services, plus the language linter and code formatter.
VSCode ExtensionsToolingTypeScript2022 - Present
Visiting Lecturer & Research Supervisor / IIT, Informatics Institute of Technology
Teach undergrad software engineering and supervise final-year research. Try to pass on what I pick up at WSO2 to the next batch of Sri Lankan engineers.
TeachingResearchCS2021 - 2023
Software Engineer / WSO2
Joined the Ballerina team. Built CI/CD pipelines for the VSCode plugin that cut release time in half. Also participated in bug bounty work.
BallerinaCI/CDBug Bounty
Things I've shipped.
scroll →
Micro Integrator VSCode Extension
Core contributor to the WSO2 Micro Integrator VSCode extension. Open-source tooling that lets people author integration flows inside VSCode.
WSO2 Integrator
Contributor on WSO2 Integrator, the open-source platform we use to connect APIs, apps, and services across cloud and on-prem.
01 const project = "ballerina-security"
02 stack = ["AppSec", "Bug Bounty", "OSS"]
03 status = shipped
Open-source Security, Ballerina
Application security work on the Ballerina platform at WSO2. Dependency hygiene, day-to-day appsec, and a bit of bug bounty.
I'm really grateful for your support throughout recovering my account and glad that you kept my trust as well... Thank you so much Chamupathi Gigara Hettige. Once again 🙏 ❤️ u did a great job 👍
Social Media Recovery for Deshani Nehara
Helped recover the TikTok account of a Sri Lankan public figure (200K+ followers) after she had been locked out for months. OSINT, identity verification, and platform escalations.
Infer
Education app for Sri Lankan students. Over 100,000 MCQs across subjects, a subscription model, and some AI-assisted study features. Thousands of downloads on Play Store.
Ninaro Education Platform
An institute management system plus LMS for an education business. Student records, smart-card attendance, billing, payouts, and Asgardeo for SSO. 2000+ students.
Dadayama
Producer of a Sri Lankan short action film. Pure outside-the-codebase work. Script to screen, on-set coordination, post in Premiere and After Effects.
Things you can npm install.
3 published
npm package · v1.0.0
mobitel-esms
Node.js client for Mobitel's eSMS Enterprise API. Send SMS, read incoming messages, check delivery status. CLI included.
MITnpm package · v1.1.1
vscode-webview-network-bridge
Transport bridge for VS Code extension ↔ webview communication. postMessage plus optional WebSocket, with request-response support.
MITnpm package · v1.1.8
@gigara/rush-github-action-build-cache-plugin
Rush.js build-cache plugin that uses GitHub Actions cache. Speeds up monorepo CI by reusing artifacts between runs.
Apache-2.0What I reach for daily.
Languages
01 · 6 items
- Java
- Python
- Ballerina
- TypeScript
- PHP
- Dart
Java
Python
TypeScript
PHP
DartWeb & Mobile
02 · 7 items
- Angular
- React
- React Native
- Flutter
- Spring
- Laravel
- Play
Angular
React
Flutter
Spring
Laravel
PlayCybersecurity
03 · 5 items
- ISC2 CC
- Cisco CyberOps
- Bug Bounty
- Threat Modeling
- Pen-testing
ISC2 CC
Cisco CyberOps
Bug Bounty
Threat Modeling
Pen-testingCloud & DevOps
04 · 7 items
- AWS
- Azure
- GCP
- Docker
- Kubernetes
- Ubuntu
- Firebase
GCP
Docker
Kubernetes
Ubuntu
FirebasePeople who've trusted me.
100+
Projects shipped
10+
Years freelancing
8
Industries spanned
2 countries
Sri Lanka & Australia
A few milestones.
National ICT Award
Won NBQSA for GigaRand, an ML-based ransomware detection system. APICTA nominee.
ISC2 Certified in Cybersecurity
Formal recognition of cybersecurity fundamentals from ISC2.
Cisco CyberOps Associate
Plus Cisco Netacad One: Cybersecurity & Network Essentials.
Sangeeth Visharad
Vocal certification from Bhatkhande Sangeeth Vidyapeeth. Music is a long-running side discipline of mine.
President · ICT Society
Led the ICT society at Rahula College, Matara. Built the LMS still in use today.
3rd · New Inventions
Southern province new inventions competition. Started young.
Got an idea?
Let's talk.
Open to senior engineering roles, cybersecurity work, consultations, lecturing, talks, and collaborations on developer tools, integration, or identity.
GitHub
@gigara ↗YouTube
@Gigara ↗TikTok
@gigarahettige ↗