Open to opportunities

Andrew Keitany

@andrewkeitany

Message

Cybersecurity Analyst and DevOps Engineer securing cloud-native systems and automating resilient infrastructure.

Kenya

Message

What I'm looking for

I seek a remote cybersecurity or DevSecOps role where I can apply penetration testing, cloud automation, and CI/CD security to build scalable, secure systems and mentor teams.

I am a driven Cybersecurity Analyst and DevOps Engineer with 5+ years securing web applications, automating cloud infrastructure, and strengthening system resilience through penetration testing and SOC monitoring.

I have conducted over 120 penetration tests and monitored more than 1,200 monthly security events using SIEM, EDR, and XDR tools, improving detection and response capabilities while integrating security gates into CI/CD pipelines.

My technical toolkit includes Python scripting, Java/Springboot, Django, Docker, Terraform, Ansible, AWS and Azure; I balance secure development and defense operations to reduce risk and accelerate delivery.

I author technical security publications, contribute to vulnerability research, and deliver practitioner-focused training—seeking a remote cybersecurity or DevSecOps role to help organizations build secure, scalable systems.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security and DevOps Engineer

Current

Vitafluence.ai

Aug 2024 - Present (1 year 2 months)

Conducted 45+ web app penetration tests and monitored 1,200+ monthly security events, integrated SAST/DAST into CI/CD to prevent vulnerabilities reaching production, and authored incident response playbooks to reduce mean time to response.

Penetration Testing SAST DAST Incident Response Python Docker Cloud Security

Full Stack Developer

Lakeatts Solutions

May 2023 - Jul 2024 (1 year 2 months)

Delivered 6 full-stack web applications using Spring Boot and modern JavaScript, implemented auth controls and containerized deployments with Docker, and developed integrations to automate tax compliance processes.

Spring Boot JavaScript Authentication Docker API Design PostgreSQL CI CD

Bug Bounty Researcher

Bugcrowd

Nov 2021 - Apr 2023 (1 year 5 months)

Performed 75+ freelance penetration tests via Bugcrowd, discovered high-impact XSS, SQLi and auth bypasses, and produced PoC reports with remediation guidance to improve client security.

Burp suite Nmap Vulnerability Research XSS)SQL Injection Reporting XSS

Software Programmer

Aphicons Solutions Limited

Jul 2018 - Mar 2021 (2 years 8 months)

Designed a real-time school bus tracking solution and built a JSP-based POS system, enhanced a hospital management system with new modules, and integrated PostgreSQL to improve data integrity and performance.