As a Senior Engineer in cyber security assurance, my day-to-dayduties include:➢ Conduct architecture reviews and end-to-end securityreviews of all projects before go-live and ensure closure ofcritical/high-risk issues. Security tests scope includesapplications, Application Programming Interfaces, cloudenvironments, on-premise environments, IAM, CI/CDpipelines, containers, codebases, logging and monitoring,encryption, etc.➢ Ensure DevSecOps policies and… Show more As a Senior Engineer in cyber security assurance, my day-to-dayduties include:➢ Conduct architecture reviews and end-to-end securityreviews of all projects before go-live and ensure closure ofcritical/high-risk issues. Security tests scope includesapplications, Application Programming Interfaces, cloudenvironments, on-premise environments, IAM, CI/CDpipelines, containers, codebases, logging and monitoring,encryption, etc.➢ Ensure DevSecOps policies and standards are implementedand communicated to the relevant parts of the organization➢ Ensure continuous security tests are done in the CI/CDpipelines, and ensure closure of critical/high-risk issuesbefore systems are deployed to production. Integratingpipelines with security tooling for Static ApplicationSecurity Testing, Software Composition Analysis, andDynamic Application Security Testing➢ Conducting vulnerability scans and security acceptance teststhroughout the code lifecycle.➢ Organize security chapter boost sessions, assist inidentifying security topics, and train software engineers onsecurity attacks and mitigation techniques to shift securityleft.➢ Define privacy controls framework to protect PII data andenforce data privacy requirements for all newproducts/services➢ Define, design and implement cyber security strategy toprotect the Safaricom applications, data and infrastructure.➢ Ensuring Vodafone Cyber Security Baselines are met➢ Work with external security researchers in the bugbounty program➢ Conduct quarterly red team exercises on existing systemsand ensure closure of all issues identified withindefined timelines➢ Secure Architecture Design, Designed and implementedsecurity frameworks to ensure robust and scalablearchitecture, focusing on risk mitigation and best practices.➢ Threat Modeling, Identified, analysed, and mitigatedpotential threats by conducting comprehensive threatmodeling for various systems and applications. Show less

I have worked as a a trainer at IAT(Institute of Advanced Technology) teaching CCNA,programming, cyber security and Ethical Hacking, and KNECKprograms.

Mentoring and teaching students on mobile applications development.