Kavienan Jegatheesan
Kavienan Jegatheesan

Undergraduate · Developer

Kavienan Jegatheesan

University of Moratuwa, Sri Lanka

Final-year Computer Science and Engineering undergraduate at the University of Moratuwa, specializing in Cybersecurity. My interests are Secure Software Development, Trustworthy AI, and emerging threats in agentic systems. I also enjoy exploring security vulnerabilities across open source software. I'm a Top-Rated Freelance Full-Stack Developer on Upwork.

Updates

Experience

Teaching Assistant — University of Moratuwa

Aug 2026 – Present

Part-time, On-site

  • Conduct lab sessions for CS2033 (Data Communication and Networking), teaching undergraduates core networking concepts including IP addressing, TCP/IP, and the OSI layer stack, with hands-on practicals using real Cisco switches and routers.

Cybersecurity Engineer Intern — WSO2 Lanka Pvt Limited

Nov 2025 – May 2026

Full-time, On-site

  • Developed a scheduled scanning system that evaluates GitHub repositories against security, maintenance, and community standards, with a monitoring dashboard.
  • Built an AI-powered service to refine security advisory content to public announcement standards, along with a companion Chrome extension.

Full-Stack Developer — Simology Limited, United Kingdom

June 2024 – May 2025

Part-time, Remote

  • Led a team of developers building an end-to-end eSIM sales platform: website backend and mobile apps.
  • Oversaw deployment, maintenance, payment gateway integrations, and testing.

Flutter Developer — Operate Holdings Limited, Saudi Arabia

Mar 2024 – July 2025

Part-time, Remote

  • Developed "Operate", a mobile app for task management, issue tracking, and employee training.
  • Led UI/UX design and implementation for users in Middle Eastern organizations.

Publications

View all →

When Tools Lie: Reliability of Mathematical Agents Under Corrupted Tool Feedback

Published

Kavienan Jegatheesan (First Author)

6th Workshop on Mathematical Reasoning and AI, NeurIPS 2026 · 2026

arXiv

Abstract

Mathematical problem solving often requires deterministic computational steps that agents delegate to tools and implicitly trust. Yet tools can fail silently, returning plausible but incorrect results. How well can agents detect and correct corrupted tool call outputs? We study this through a controlled corruption framework where a hidden interceptor replaces tool call results with plausible incorrect information on targeted problems. We evaluate agents across 31 problems under four verification designs including no verification (baseline), mandatory same-context reflection, optional fresh-context verification, and optional structural verification. Without verification, corruption causes dramatic accuracy loss, from 100% down to 72.4%. Mandatory reflection fully recovers this performance to 100%. Optional verification improves accuracy only when models actively invoke it. Our results show that checking frequency is strongly associated with robustness differences, while unequal invocation prevents a controlled comparison of verifier quality. A supporting recovery experiment shows that full problem restart succeeds in 100% of cases after explicit detection. These findings demonstrate that verifier availability and verification policy are separate components of mathematical-agent reliability. Mandatory policies enforce verification while optional policies depend on the model’s own choice to invoke it.

Deriving Execution Environments for Dynamic Analysis of Packages

In Preparation

Kavienan Jegatheesan (Co-Author)

36th USENIX Security Symposium (target venue) · 2026

Abstract

Parses package source into a syntax tree to extract the machine conditions malicious packages gate their payloads on, then derives a covering-array-based set of execution environments guaranteed to combine those conditions. Provisions each environment for an existing dynamic scanner and compares detections against a single reference environment and a random baseline of equal size, to test whether the derived set actually helps.

Projects

View all →

Code Scanner AI

A multi-agent AI security analysis tool built as a three-agent pipeline that discovers API endpoints, generates OWASP-mapped security checklists, and inspects code for vulnerabilities like SQL injection, XSS, and command injection.

Next.jsTypeScriptReactTailwind CSSOpenAI APIAnthropic APIDocker

Individual Project · 2026

AgentWorm

Research project focused on building and studying an agentic command-and-control system for autonomous network propagation in a contained lab environment.

PythonLLMAgentic SystemsCybersecurity ResearchNetwork Simulation

Research Project · 2026

Education

University of Moratuwa — Moratuwa, Sri Lanka

Mar 2023 – Present

B.Sc. (Honours) in Engineering — Computer Science & Engineering (Cybersecurity Stream)

  • GPA: 3.68 / 4.0

Royal College — Colombo, Sri Lanka

Jan 2008 – Mar 2022

Primary and Secondary Education

  • G.C.E. Advanced Level: 3 A's, Physical Science Stream (Z-score: 2.1595)
  • G.C.E. Ordinary Level: 9 A's

Skills

Programming Languages: Python, TypeScript, SQL, Java, C, C++, Solidity, Bash

AI & LLMs: OpenAI API, Anthropic API, LangChain / LangGraph, Prompt Engineering, MCP

Cybersecurity Tools: OWASP ZAP, Wireshark, Nmap, Burp Suite

Frameworks & Cloud: React.js, Next.js, Node.js, Docker, AWS, Google Cloud

Awards & Honors

Leadership

Volunteering