Open to opportunities

Dare Ogunsola

@dareogunsola

Message

I build application, cloud, and DevSecOps security capabilities that enable secure software delivery.

Canada

Message

What I'm looking for

I'm looking for hands-on Product Security, Application Security, Security Engineering, or Cloud Security opportunities where I can build security capabilities at scale and help engineering teams ship secure products.

At Alterna Savings, I lead Application Security and DevSecOps initiatives across customer-facing and internal applications in AWS, Azure, Kubernetes, and hybrid-cloud environments.

I partner directly with engineering teams on threat modeling, security architecture and code reviews, and application and API testing to address OWASP-related vulnerabilities before production.

I've integrated SAST, DAST, SCA, container, secrets, and Infrastructure-as-Code scanning into CI/CD pipelines, and built Python-based security automation through Azure DevOps and Azure Key Vault. My risk-based vulnerability management practices reduced critical and high-risk exposure by approximately 70%.

Previously, I strengthened application, infrastructure, identity, cloud, and incident-response security at Empire Life and LCM Security. I enjoy solving security problems through engineering and helping teams ship secure products without unnecessarily slowing delivery.

Experience

Work history, roles, and key accomplishments

Current

Senior Information Security Officer

Current

Alterna Savings

Oct 2021 - Present (4 years 11 months)

• Lead Application Security and DevSecOps initiatives across customer-facing and internal applications spanning AWS, Azure, Kubernetes, and hybrid-cloud environments.

• Lead threat modeling using STRIDE and conduct security architecture reviews for web applications, APIs, microservices, authentication systems, and cloud-native workloads.

• Perform secure code reviews and application/API security

Application Security DevSecOps AWS Azure Kubernetes Threat Modeling Secure Code Review Application Security Testing SAST DAST SCA Container Security Python Azure DevOps Azure Key Vault Zero Trust OIDC Vulnerability Management

Information Security Engineer

Empire Life

Sep 2019 - Oct 2021 (2 years 1 month)

• Worked across Application Security and DevSecOps, integrating security testing into CI/CD pipelines, assessing web applications and APIs, conducting threat modeling, and partnering with developers to address security issues throughout the SDLC.

• Managed and strengthened network and infrastructure security controls while supporting incident response, security investigations, containment, and re

Application Security DevSecOps CI CD Threat Modeling Web Application Security API Security Network Security Incident Response Access Management SSO MFA RBAC Privileged Access Management AWS Azure Kubernetes Docker Vulnerability Management

Security Engineer

LCM Security Inc.

May 2018 - Sep 2019 (1 year 4 months)

• Worked across security engineering and penetration testing, conducting security assessments across web applications, APIs, infrastructure, and cloud environments.

• Implemented and supported network and endpoint security controls, including firewalls, IDS/IPS, endpoint protection, and other defense-in-depth technologies.

• Supported SOC and incident response operations, including security moni