Looking for a job

Bolaji John

@bolajijohn

Cybersecurity Engineer driving secure SDLC architecture. Focused on third-party risk, data flows, API security, and continuous self-improvement.

Nigeria

Message

What I'm looking for

I want to secure production systems end-to-end—AppSec, API security, IAM, and cloud controls—while embedding secure SDLC/CI-CD and driving PCI DSS-aligned compliance. I value teams that ship fast with measurable risk reduction and strong threat monitoring.

I’m a Cybersecurity Engineer who focuses on building security directly into the software development lifecycle. I don’t believe security should be a final gatecheck; instead, I work closely with engineering teams early on to threat model system architecture, map complex data flows, and secure applications from design to deployment.

A big part of my focus is on third-party risk and backend infrastructure. I love deep-diving into API integrations, ensuring cryptographic webhook validations are airtight, and enforcing strict data-handling policies to protect payload integrity and prevent data sprawl.

Beyond the technical controls, I am driven by continuous self-improvement. Threats and technologies evolve rapidly, and I genuinely enjoy mastering new security methodologies, exploring emerging defense tools, and collaborating with cross-functional teams to build highly resilient, compliant environments.

Experience

Work history, roles, and key accomplishments

Current

Application Security Engineer

Current

Konga Nigeria

Jul 2018 - Present (7 years 11 months)

Led application security assessments for fintech payment APIs and e-commerce platforms, remediating high-risk OWASP Top 10 issues (e.g., broken access control, IDOR, authentication bypass) before production releases. Designed API security review processes and IAM RBAC/identity security policies across Azure and GCP to strengthen authentication and access control protections.

OWASP Top 10 API Security IAM Governance RBAC JWT Azure Google Cloud Platform SIEM CI CD Security

IAM & Infrastructure Security Analyst

Yudala

Dec 2017 - Jun 2018 (6 months)

Performed vulnerability assessments and penetration testing aligned to ISO 27001, NIST, and CIS, reducing enterprise risk exposure by 40%. Managed IAM with Active Directory and supported threat detection and response using firewalls, IDS/IPS, and SIEM tools.

ISO 27001 NIST CIS Benchmarks Vulnerability Assessment Penetration Testing Active Directory IAM IPS SIEM Incident Response

Security Engineer (Facilities)

Alpha Mead Facilities

Feb 2017 - Nov 2017 (9 months)

Supported internal and external security audits and remediation efforts, assisting with IAM policy implementation and access control enforcement. Coordinated with engineering teams to improve security monitoring and system protection and participated in compliance and risk management activities.

Security Audits Access Control Security Monitoring Risk Management & Compliance Identity Governance