Jackline Maina Email & Phone Number

Nairobi County, Kenya

Nairobi, Kenya

- Conducted extensive security code reviews of critical software applications to identify vulnerabilities and ensure secure coding practices. - Performed dynamic and static application security testing, including QA testing, fuzzing, DAST, SAST, IAST, and RASP to uncover flaws in web apps, APIs, and mobile apps.- Remediated discovered vulnerabilities in a timely manner by providing detailed reports and collaborating with developers for effective solutions.- Developed and implemented application security policies, standards, and guidelines aligned with OWASP Top 10 and other best practices.- Led threat modeling workshops to identify architectural weaknesses and engineered security solutions into application design early in the SDLC.- Championed DevSecOps initiatives by integrating security tools into CI/CD pipelines and providing security coaching to developers.- Managed source code analysis using open source and enterprise solution enabling secure coding practices.- Provided expert guidance on authentication, access control, encryption, and other application security principles to development teams. - Performed cutting-edge security research to identify zero-day vulnerabilities in proprietary and open source applications.

Nairobi, Kenya

- Investigated security alerts and events to determine root causes, impacts, and appropriate response strategies.- Performed threat hunting activities to identify advanced persistent threats and targeted attacks within the environment.- Conducted regular vulnerability scans on networks, endpoints, servers, databases, and applications to uncover security weaknesses.- Analyzed vulnerability scan reports and recommended remediation actions to development and operations teams.- Developed and implemented security hardening standards aligned to CIS benchmarks to reduce attack surface.- Responded to security incidents by executing containment, eradication and recovery procedures according to IR plans. - Participated in forensic analysis of compromised systems and assisted with gathering evidence for investigations.- Produced detailed incident reports documenting security events, analysis, findings and recommendations.- Collaborated with IT and security leaders to improve security policies, controls, procedures based on findings.- Monitored security infrastructure including firewalls, SIEM, IDS/IPS, antivirus/malware solutions to identify threats and malicious activity. - Kept up-to-date with latest cybersecurity threats, tools and techniques through training, certifications, and memberships.

Industrial Area Nairobi

- Monitored and maintained organization's IT systems infrastructure including networks, servers, hardware, and software- Troubleshot IT issues across infrastructure and applications to restore services and minimize downtime - Analyzed system logs, performance data, and metrics to proactively identify and address potential problems- Installed and configured new IT systems; performed upgrades, migrations, and patching on existing ones- Identified opportunities for system enhancements and improvements; made recommendations to optimize infrastructure- Developed and maintained documentation, policies, manuals, reports, and dashboards related to IT infrastructure- Liaised with vendors and managed relationships for hardware/software procurement and contract negotiations- Ensured IT infrastructure adhered to best practices, industry standards, and information security policies- Conducted capacity planning and resource optimization to meet current and future business needs- Provided technical support and guidance to end users for accessing and using IT systems and tools- Kept up to date with technological advancements to evaluate new solutions for implementation- Participated in change management processes and communicated changes effectively to stakeholders