Penetration Tester & Security Consultant
Securing web, API and mobile platforms at scale. 4+ years helping fintechs and regulated organisations identify, exploit and remediate critical security risks.
Decrypting the job
I'm a Senior Security Engineer specialising in application security for high-stakes fintech and regulated environments. My focus is on identifying and eliminating security risks before they become breaches.
With expertise spanning web application security, mobile reverse engineering and API security, I work closely with engineering and DevOps teams to embed security into the development lifecycle. Not as an afterthought, but as a core component of product delivery.
My approach combines deep technical expertise with clear communication, so stakeholders from CTOs to developers can understand and act on security findings. The job is the fix, not the finding.
Comprehensive security assessments of web applications to identify vulnerabilities before attackers do. OWASP Top 10 focused testing for production-ready applications.
In-depth analysis of REST, GraphQL and SOAP APIs. Authentication flaws, injection points and business logic vulnerabilities.
Android and iOS testing, static and dynamic. Insecure data storage, weak cryptography and communication vulnerabilities.
Real-world attack simulation to uncover exploitable vulnerabilities. Detailed reporting with risk prioritisation and remediation guidance.
Proactive threat identification using STRIDE. Map attack surfaces and prioritise security investment before development.
Security integrated into CI/CD pipelines. Faster, safer releases with automated security testing and developer training.
Android application reverse engineering to uncover hidden vulnerabilities, analyse malware and validate security controls.
The record
A track record of securing critical fintech infrastructure and delivering measurable security improvements.
Real-world security assessments with measurable impact on application security and risk reduction. Client names withheld.
A fintech platform connecting to multiple banking APIs via SWIFT required comprehensive security validation before production deployment.
Identified 12 critical vulnerabilities including authentication bypasses and injection points. All issues remediated before launch, ensuring compliance with banking security standards.
A national-scale identity verification system processing millions of requests needed thorough security assessment to protect citizen data.
Discovered and helped remediate critical access control vulnerabilities. Enhanced data protection measures for sensitive identity information.
A growing fintech needed to understand their threat landscape before expanding into new markets with stricter regulatory requirements.
Delivered comprehensive threat model identifying 45+ potential attack vectors. Prioritised security roadmap adopted by engineering leadership.
Mobile applications for financial services required deep security analysis including reverse engineering to identify hidden vulnerabilities.
Uncovered hardcoded credentials, insecure storage patterns and weak cryptographic implementations. Guided development teams through secure remediation.
Free cybersecurity tools for beginners and practitioners. No sign-ups, no fluff, just tools that solve real problems.
The toolkit for identifying, exploiting and remediating security vulnerabilities across platforms.
Industry-recognised certifications validating expertise in security assessment and ethical hacking.
Public talks and community sessions, from GDG Lagos to student builder groups.
Personal guidance from a working security engineer. Whether you're starting out or moving up, I'll help you find your way through it.
Offensive security techniques, vulnerability assessment and ethical hacking methodology.
Security automation, CI/CD pipeline security and infrastructure as code.
Leading security teams, communicating with stakeholders and building security culture.
Reach out through the form below.
Want to discuss a pentest, a security audit or one-to-one mentorship? Grab a slot on the calendar below.
Prefer another way? Open the booking page in a new tab
Whether you need a security assessment, a penetration test, or want to talk through securing your application.
Available for new projects.
Still have questions? Ask them in a 15-minute call.
Book a Call