Open to opportunities

Davis User

@davisuser

Message

Information Security professional with expertise in cloud and application security.

Kenya

Message

What I'm looking for

I am looking for a role that fosters innovation, collaboration, and continuous learning in security.

I am an Information Security professional with over 4 years of experience in securing cloud workloads, web and mobile applications, and API technologies. My expertise lies in implementing security best practices and threat detection using tools like AWS GuardDuty and SecurityHub, ensuring compliance with industry standards. I am passionate about technological innovation and cross-functional collaboration to drive business success while maintaining robust security measures.

In my current role as an Information Security Consultant at Leja Limited, I developed and executed an information security strategy that resulted in a 70% reduction in security incidents. I have successfully led the migration of cloud workloads on AWS, integrated security into new systems, and conducted security awareness training that improved incident response time by 25%. My previous experience as an Application Security Tester involved performing security testing on over 40 applications, where I discovered and reported critical vulnerabilities, significantly enhancing security for my clients.

Experience

Work history, roles, and key accomplishments

Current

Information Security Consultant

Current

Leja Limited

May 2024 - Present (1 year 1 month)

Developed and executed an information security strategy, significantly reducing security incidents and enhancing policies. Conducted regular risk assessments and vulnerability scans, leading to a substantial reduction in vulnerability exposure. Led the migration of AWS cloud workloads to private subnets, securing infrastructure and reducing external attack surface.

Information Security Strategy Risk Assessment AWS Security Incident Response Security Policies Threat Detection

Current

Application Security Tester

Current

Bug Bounty Platforms

Feb 2019 - Present (6 years 4 months)

Performed extensive security testing on over 40 mobile and web applications, utilizing various tools to identify and exploit vulnerabilities. Discovered and reported more than 100 security vulnerabilities, including critical issues like insecure data storage and misconfigurations. Created comprehensive security reports for clients, detailing vulnerabilities, PoCs, and actionable remediation steps.

Application Security Mobile Security Penetration Testing Nmap Ffuf

Cloud Engineer

Pawa IT Solutions

Oct 2023 - Present (1 year 8 months)

Collaborated with clients to design and deliver over 10 tailored cloud-based applications, achieving high client satisfaction. Developed and maintained secure virtual environments, ensuring adherence to industry security standards and reducing risks. Deployed and troubleshooted cloud initiatives, achieving high uptime and seamless integration, while educating cross-functional teams on cloud soluti

Cloud Architecture AWS Google Cloud Infrastructure Automation Troubleshooting

Application Security Engineer

Twiga Foods Limited

Oct 2021 - Present (3 years 8 months)

Conducted penetration testing and vulnerability assessments on applications serving thousands of customers, significantly reducing compromise risk. Implemented and automated security testing within CI/CD pipelines, streamlining vulnerability detection and resolution. Performed secure code reviews and provided guidance for web and mobile applications, reducing code vulnerabilities and improving sec

Application Security Penetration Testing Vulnerability Assessment Code Review Snyk Bitbucket Pipelines Web Security Mobile Security

Systems Developer

Kylix Technologies Limited

Aug 2020 - Present (4 years 10 months)

Developed and maintained custom modules for the client's Odoo ERP system, enhancing functionality in inventory, purchasing, and order processing. Collaborated with functional teams to translate business requirements into technical specifications, improving project delivery success. Provided ongoing support for Odoo ERP customizations, troubleshooting issues and implementing bug fixes, which decrea

Odoo Python PostgreSQL Inventory Management Order Processing Systems Specifications Troubleshooting

Education

Degrees, certifications, and relevant coursework

Kenyatta University

Bachelor of Information Technology, Information Technology

Studied core concepts of information technology, covering areas such as software development, network administration, and database management. Gained foundational knowledge in IT systems and their applications.