Security Engineer
Resilient Software Security
Keywords
Automation
Cloud Computing Security
Safety Principles
Amazon Web Services
Identity Management
Security Testing
Threat Modeling
Devsecops
Auditing
Microsoft Azure
Skills
Cloud Security
Comprehensive security assessments for cloud environments using CSPM tools. Expertise in AWS, Azure Security Center, and cloud security posture management.
Secure Development Lifecycle
Leading S-SDLC transformations for organizations. Integration of threat modeling, vulnerability management, and static analysis tools into software development cycles.
DevSecOps
Implementation of secure CI/CD pipelines using GitHub Actions. Automation of security testing and quality gates in deployment processes.
Vulnerability Assessment
Proficiency in DAST, SAST, and threat modeling techniques. Application of various security testing methodologies to identify and mitigate vulnerabilities.
Cloud Infrastructure Management
Experience with AWS Organizations, IAM, and multi-account environments. Implementation of secure identity and access management strategies.
Security Automation
Development of Python scripts for automating security tasks. Creation of custom tools to enhance efficiency in security operations.
Compliance and Auditing
: Ensuring compliance with industry standards and regulations. Conducting internal and external security audits against CIS and NIST benchmarks.
Comprehensive security assessments for cloud environments using CSPM tools. Expertise in AWS, Azure Security Center, and cloud security posture management.
Secure Development Lifecycle
Leading S-SDLC transformations for organizations. Integration of threat modeling, vulnerability management, and static analysis tools into software development cycles.
DevSecOps
Implementation of secure CI/CD pipelines using GitHub Actions. Automation of security testing and quality gates in deployment processes.
Vulnerability Assessment
Proficiency in DAST, SAST, and threat modeling techniques. Application of various security testing methodologies to identify and mitigate vulnerabilities.
Cloud Infrastructure Management
Experience with AWS Organizations, IAM, and multi-account environments. Implementation of secure identity and access management strategies.
Security Automation
Development of Python scripts for automating security tasks. Creation of custom tools to enhance efficiency in security operations.
Compliance and Auditing
: Ensuring compliance with industry standards and regulations. Conducting internal and external security audits against CIS and NIST benchmarks.
Project history
09/2022
-
Present
Led secure development lifecycle transformations, implemented automated secure deployments, enhanced cloud security posture, managed cloud security operations, and fostered DevSecOps culture.
12/2021
-
09/2022
Application Security Engineer
Stanbic IBTC
Conducted security assessments using SAST and DAST tools, developed threat modeling processes, and ensured compliance with security policies and regulations.
02/2021
-
01/2022
Cybersecurity Analyst
UK-Dion Group
Collaborated on security policies, implemented network firewalls, deployed web applications on AWS, and automated administrative tasks.
04/2019
-
08/2019
Engineering Intern
Addax Petroleum
Compiled test scripts for internal software, supported IT rollouts, and collaborated on distribution network management.
Certifications
AWS Security Specialty Certificate
AWS
2022
Certified Ethical Hacker
EC-Council
2020
Local Availability
Open to travel worldwide
