Open to opportunities

Arnold Ganga

@arnoldganga

I build secure application pipelines, manage cyber risk, and strengthen incident response across enterprise environments.

Zimbabwe

Message

What I'm looking for

I'm looking to build and improve application security, DevSecOps, cyber risk, and security operations capabilities while embedding secure-by-design practices across enterprise technology environments.

I've strengthened cyber risk and application security at AFC Commercial Bank and NSSA, embedding SAST, SCA, DAST, API testing, SBOMs, and CI/CD security controls into the SDLC. I also conduct secure code reviews, vulnerability assessments, and continuous production monitoring to help teams remediate weaknesses before deployment.

Previously at ProComm Technologies, I supported more than 10 organizations across banking, insurance, mining, and healthcare with VAPTs, incident response, threat hunting, and security awareness programs. I've improved SOC playbooks to reduce false positives by 25% and led incident response and threat hunting work that reduced time-to-detection by 30%.

Experience

Work history, roles, and key accomplishments

Current

Applications Security Specialist

Current

NSSA

May 2026 - Present (3 months)

Supporting the implementation and enhancement of Application Security practices, conducting secure code reviews and vulnerability assessments, and integrating security controls within the SDLC.

Application Security Secure Code Review Vulnerability Assessment SDLC Security Controls

Senior Cyber Security Risk Analyst

AFC Commercial Bank

Aug 2024 - Apr 2026 (1 year 8 months)

Contributed to establishing the Cyber Risk function, reviewed policies and DR/BC plans, conducted user access recertifications, implemented DevSecOps pipelines, and led incident response and threat hunting.

DevSecOps SAST SCA DAST Vulnerability Management Incident Response Threat Hunting Security Awareness Access Management

SOC Analyst (Level 2)

ProComm Technologies

Feb 2022 - Jul 2024 (2 years 5 months)

Performed VAPTs for multiple clients, authored executive-level reports, enhanced SOC playbooks, integrated SIEM/SOAR/XDR tools, and conducted social engineering tests and awareness programs.

VAPT Web Application Security Mobile Security API Security Network Security SIEM SOAR XDR Incident Response Social Engineering ISO 27001 NIST PCI DSS

Systems Support & Data Engineer

ZETDC Southern Region

Oct 2018 - Aug 2019 (10 months)

Supported endpoint security and Active Directory management, provided IT support, analysed infrastructure data using Python, and assisted with networking and asset inventory.

Endpoint Security Active Directory IT Support Python Networking Asset Management