# Cameron Raaff

Cameron Raaff is a remote worker on Himalayas, Senior Security Engineer at Peach Payments Ltd., based in South Africa.

Source: https://himalayas.app/@cameronraaff

```text
Senior Security Engineer at Peach Payments securing cloud environments and embedding automated security testing into CI/CD pipelines.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | South Africa |
| Authorized to work in | South Africa |
| Salary expectations | 2034k+ ZAR |
| Job categories | Security Engineer, Penetration Tester, Cybersecurity Consultant |
| Skills | Cloud Security, Penetration Testing, Vulnerability Management, Application Security, DevSecOps, Red Teaming, Incident Response, Security Architecture, Cloud Security Posture Management, IAM, CI CD Security, Static Application Security Testing, Dynamic Application Security Testing (DAST), Threat Modeling, Security Operations |
| LinkedIn | https://linkedin.com/in/cameron-james-raaff-85134316a |

## About

```text
At Peach Payments Ltd., I lead enterprise-wide vulnerability management and secure cloud environments through posture management, continuous monitoring, and identity and access controls. I also embed automated security testing into CI/CD pipelines and drive audit readiness across PCI DSS, PCI PIN, and ISO 27001.

Previously, I conducted penetration tests and Red Team engagements at BUI (Part of First Technology Group), and supported security operations and managed security services at Magix Security. I’ve also developed Python and Bash automation for security assessments, and hold an Honours degree in Computer Science alongside CCSP and CEH certifications.
```

## Experience

### Senior Security Engineer (current)

Peach Payments Ltd.. Oct 2024 - Present

```text
Lead enterprise-wide vulnerability management and secure cloud environments through CSPM, IAM, and continuous monitoring. Drive compliance with PCI DSS, PCI PIN, and ISO 27001, and architect security integrations in CI/CD pipelines.
```

Skills: Vulnerability-Management, Cloud-Security, CSPM, IAM, PCI-DSS, PCI-PIN-Security, ISO-27001, CI-CD, SAST, DAST, Incident-Response, Penetration-Testing, AI, Security-Automation, Endpoint-Security, Cryptographic-key-management

### Penetration Tester/Cyber Security Consultant

BUI (Part of First Technology Group). Apr 2023 - Sep 2024

```text
Executed comprehensive penetration testing across web applications, APIs, mobile apps, cloud, and network infrastructure. Led full-scope Red Team engagements and produced technical reports for clients.
```

Skills: Penetration-Testing, Red-Teaming, Web-Application-Security, API-Security, Mobile-Security, Cloud-Security, Network-Security, Social-Engineering, Python, BASH, Security-Automation, Report-Writing

### Cyber Security Engineer

Magix Security. Jun 2020 - Mar 2023

```text
Conducted penetration testing and vulnerability assessments across various environments. Managed vulnerability programs, supported SOC operations, and delivered MSSP services for SentinelOne and Qualys.
```

Skills: Penetration-Testing, Vulnerability-Assessment, Threat-Modeling, Incident-Response, SOC, SentinelOne, Qualys, MSSP, Phishing-Simulations, Security-Awareness

### Software Engineer (Temporary Employment)

Khonastone. Apr 2020 - Jun 2020

```text
Designed and developed employee management software for a construction company.
```

## Education

### The SecOps Group

CNPen – Certified Network Pentester, Network Penetration Testing

```text
Certified Network Pentester (CNPen) certification.
```

### Fortinet

Fortinet NSE 1–3, Network Security

```text
Fortinet Network Security Expert Levels 1–3 certification.
```

### TCM Security

PJPT – Practical Junior Penetration Tester, Penetration Testing

```text
Practical Junior Penetration Tester (PJPT) certification.
```

### The SecOps Group

CAP – Certified AppSec Practitioner, Application Security

```text
Certified AppSec Practitioner (CAP) certification.
```

### TCM Security

PJMT – Practical Junior Mobile Tester, Mobile Security Testing

```text
Practical Junior Mobile Tester (PJMT) certification.
```

### University of KwaZulu-Natal

Bachelor of Science (Honours), Computer Science. 2019 - 2019. Grade: Cum Laude

```text
Bachelor of Science (Honours) in Computer Science, awarded cum laude.
```

### University of KwaZulu-Natal

Bachelor of Science, Computer Science and IT. 2016 - 2018

```text
Bachelor of Science in Computer Science and Information Technology.
```

### ISC2

CCSP – Certified Cloud Security Professional, Cloud Security

```text
Certified Cloud Security Professional (CCSP) certification.
```

### EC-Council

CEH – Certified Ethical Hacker, Ethical Hacking

```text
Certified Ethical Hacker (CEH) certification.
```

### The SecOps Group

CAPen – Certified AppSec Pentester, Application Security

```text
Certified AppSec Pentester (CAPen) certification.
```

## Tech stack

- Python
- Qualys
- Bash
- SentinelOne

To contact Cameron, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Anda Ben](https://himalayas.app/@andaben): Cybersecurity Engineer, Accenture
- [Isheakudzwe Jonathan](https://himalayas.app/@isheakudzwejonathan): Snr Cyber Security Specialist, Vodacom
- [Farai Masakadza](https://himalayas.app/@faraimasakadza): IT, Cyber Security Consultant & Pen Tester, Freelancer
- [Kwethemba Nkabinde](https://himalayas.app/@kwethembankabinde): Senior Security Specialist – Defense Systems, Multichoice
- [matthew Hendricks](https://himalayas.app/@matthewhendricks): Security Researcher, Bugcrowd
- [Katemo Jephte Kitenge](https://himalayas.app/@katemojephtekitenge): Cyber Ingineer , Mining Holding
- [Manelisi Majozi](https://himalayas.app/@manelisimajozi): Security Engineer, Altron Security
- [Ishmael Dube](https://himalayas.app/@ishmaeldube): Security Operations Lead, Shoprite Checkers Group
- [dylan du preez](https://himalayas.app/@dylandupreez): Junior Information Technology Engineer, New Order Group
- [Sthe sabs](https://himalayas.app/@sthesabs): Cybersecurity Engineer/Consultant, Milkor Integrated Systems