Cyber Security Jobs in Sri Lanka 2025
Vacancies, Salary Ranges, Required Qualifications and Career Paths
Sri Lanka's digital economy is expanding rapidly and so is the demand for cyber security professionals. This guide covers every active role, realistic LKR salary ranges, the certifications employers look for, and a practical roadmap from student to security specialist.
The State of Cyber Security Jobs in Sri Lanka
Cyber crime costs Sri Lankan organisations millions of rupees annually. The Central Bank of Sri Lanka (CBSL), the Telecommunications Regulatory Commission, and the country's fast-growing fintech sector have all tightened their cyber security requirements, creating a sustained pipeline of cyber security job vacancies that outstrips the number of qualified candidates.
The IT industry in Sri Lanka employs over 130,000 professionals and contributes more than USD 1 billion in export revenue. Within that ecosystem, cyber security is among the fastest-growing specialisms. Roles in Security Operations Centres (SOCs), cloud security, application security, and governance, risk, and compliance (GRC) are being created faster than universities currently produce graduates trained specifically in security.
For students and working professionals, this skills gap represents a genuine opportunity. An IT graduate who supplements their core qualification with even a single industry certification — such as CompTIA Security+ — is already marketable to a large number of employers in Colombo and increasingly outside the capital.
Cyber Security Job Market at a Glance
- Typical Entry Salary: LKR 60,000 – 100,000 per month
- Mid-Level Salary: LKR 120,000 – 220,000 per month
- Senior / CISO Level: LKR 300,000 – 500,000+ per month
- Top Hiring Sectors: Banking, Telecom, IT Outsourcing, Government, E-commerce
- Fastest-Growing Role: SOC Analyst and Cloud Security Engineer
- Key Certifications: CompTIA Security+, CEH, CISSP, CCNA Security
Cyber Security Job Roles and Salary Ranges in Sri Lanka
| Job Title | Experience | Monthly Salary (LKR) | Key Certification |
|---|---|---|---|
| SOC Analyst (L1) | Entry (0–2 yrs) | 60,000 – 90,000 | CompTIA Security+ |
| SOC Analyst (L2/L3) | Mid (2–5 yrs) | 100,000 – 180,000 | CEH / CySA+ |
| Penetration Tester | Mid (3–6 yrs) | 130,000 – 250,000 | CEH / OSCP |
| Network Security Engineer | Mid (3–6 yrs) | 120,000 – 220,000 | CCNA Security |
| Cloud Security Engineer | Mid (3–6 yrs) | 150,000 – 280,000 | AWS Security / AZ-500 |
| Information Security Officer | Senior (5–9 yrs) | 200,000 – 350,000 | CISM / CISSP |
| Cyber Security Consultant | Senior (5–10 yrs) | 220,000 – 380,000 | CISSP / ISO 27001 |
| Chief Information Security Officer | 10+ yrs | 350,000 – 550,000+ | CISSP / CISO Program |
Salary figures are indicative monthly LKR ranges for Sri Lanka. MNCs and outsourcing firms may pay 20–40% above these figures.
Top Employers for Cyber Security Jobs in Sri Lanka
Cyber security vacancies are spread across several key sectors. The banking and financial services industry is the single largest employer, driven by CBSL regulations mandating dedicated security functions. Telecommunications giants such as Dialog, SLT-MOBITEL, and Hutch maintain large internal security teams. IT outsourcing and managed service providers hire security engineers to serve international clients, often at salaries that reflect export revenues.
Banking & Finance
Employers: Commercial Bank, Sampath Bank, HNB, People's Bank, NSB, DFCC
CBSL guidelines drive mandatory security staffing
Telecommunications
Employers: Dialog Axiata, SLT-MOBITEL, Hutch, Airtel Lanka
Large internal NOC/SOC teams; growing cloud security
IT Outsourcing & MSPs
Employers: WSO2, IFS, Pearson Lanka, Mitra Innovation, 99X
Export-oriented; often pay above local benchmarks
Government & Defence
Employers: ICTA, Sri Lanka CERT|CC, Ministry of Defence IT Units
Growing national cyber defence initiatives
Insurance & Healthcare
Employers: Ceylinco Insurance, Softlogic Life, Asiri Hospital Group
Patient data and financial data protection requirements
E-commerce & Fintech
Employers: LankaPay, PayHere, Kapruka, PickMe
PCI-DSS compliance and fraud prevention roles
Cyber Security Career Path in Sri Lanka
A typical cyber security career in Sri Lanka moves through four broad stages. Understanding this progression helps you plan your qualifications and salary expectations at each step.
Stage 1: Foundation (0–2 years)
Typical Roles: IT Support Technician, Junior SOC Analyst, Network Administrator
Salary Range: LKR 55,000 – 95,000/month
What to Do: Complete HND in IT; obtain CompTIA A+ and Security+; build home lab skills
Stage 2: Specialist (2–5 years)
Typical Roles: SOC Analyst L2/L3, Network Security Engineer, Junior Pen Tester
Salary Range: LKR 100,000 – 200,000/month
What to Do: Earn CEH or CCNA Security; gain hands-on incident response experience
Stage 3: Senior Practitioner (5–9 years)
Typical Roles: Senior Security Engineer, Security Architect, ISO, Pen Test Lead
Salary Range: LKR 200,000 – 380,000/month
What to Do: Pursue CISSP or CISM; lead security projects and mentor junior staff
Stage 4: Leadership (10+ years)
Typical Roles: CISO, Head of Information Security, Cyber Security Director
Salary Range: LKR 350,000 – 550,000+/month
What to Do: Combine technical credibility with strategic and board-level communication skills
How Ceylon Open Campus Prepares You for Cyber Security Jobs
Ceylon Open Campus, based in Kattankudy, Sri Lanka, offers HND and degree-level IT programmes that provide the essential networking, operating systems, and security fundamentals that cyber security employers demand. Our programmes are structured so that students can sit for industry certification exams such as CompTIA Security+ and CEH alongside or immediately after completing their qualification.
HND in Information Technology with security-focused modules
BSc top-up degrees through accredited UK university partners
Networking and infrastructure training aligned to CCNA preparation
Practical lab-based learning simulating real security environments
Career guidance and employer connections in the Colombo IT sector
Flexible study options for working professionals
Frequently Asked Questions
What cyber security jobs are available in Sri Lanka?
Sri Lanka has a growing range of cyber security roles including SOC Analyst, Security Operations Centre (SOC) Engineer, Penetration Tester, Information Security Officer, Network Security Engineer, Cyber Security Consultant, Cloud Security Architect, and Chief Information Security Officer (CISO). Most vacancies are concentrated in Colombo, but remote-friendly roles are increasingly available across the island.
What qualifications do I need for a cyber security job in Sri Lanka?
Employers typically require at minimum an HND or BSc in Information Technology, Computer Science, or a related field. Industry certifications such as CompTIA Security+, CEH (Certified Ethical Hacker), CISSP, or CCNA Security significantly strengthen your application. For senior roles, a postgraduate qualification or a track record of managing security incidents is expected.
How much do cyber security jobs pay in Sri Lanka?
Salaries range from LKR 60,000–100,000 per month at entry level, LKR 120,000–220,000 at mid-level, and LKR 250,000–400,000+ for senior and management positions. CISO-level roles in large banks or telecoms can exceed LKR 500,000 per month including allowances.
Which sectors hire the most cyber security professionals in Sri Lanka?
Banking and financial services, telecommunications, government agencies (including the Sri Lanka CERT|CC ecosystem), IT outsourcing and managed service providers, and large retail/e-commerce companies are the primary employers. The banking sector in particular has strict regulatory requirements under the CBSL, driving consistent demand for security staff.
Can I get a cyber security job in Sri Lanka without a degree?
Yes, although increasingly competitive. Practical certifications such as CompTIA Security+, CEH, or eJPT combined with a portfolio of lab work (TryHackMe, HackTheBox) and a relevant HND can get you into junior roles. Many employers value demonstrated skills over pedigree alone at the entry level, though degree holders still receive preference in large organizations.
How do I start a cyber security career in Sri Lanka?
Begin with an accredited IT qualification such as an HND in IT or a BSc in Computer Science, focusing on networking and operating systems modules. Layer on a CompTIA Security+ or CEH certification, build hands-on experience through labs and internships, and target entry-level SOC analyst or IT support with security responsibilities positions. Ceylon Open Campus offers HND and degree pathways specifically designed to give you the IT foundations that cyber security employers demand.
Ready to Start Your Cyber Security Career?
Contact Ceylon Open Campus today to learn how our IT and cyber security programmes prepare you for in-demand roles in Sri Lanka and beyond.
Phone
075 922 0083
Mon–Sat: 9AM – 6PM
coc.ceylon@gmail.com
24-hour response time
Campus
Ceylon Open Campus
Kattankudy, Sri Lanka