Franklin stephen

I’m an Application Security Specialist with experience designing, implementing, and maintaining security measures that secure fintech and banking systems, applications, and APIs. I focus on security-by-design and risk-driven prioritization to strengthen resilience against evolving threats and safeguard critical assets and data.

At Access Bank Plc, I lead application security by conducting threat modeling reviews and security architecture assessments across web, APIs, and cloud-based applications. I champion DevSecOps implementation by integrating Veracode SAST into Azure DevOps pipelines and IDE, achieving 95% automated security scanning and reducing vulnerability detection and remediation from weeks to hours—at the point of development.

I also drive vulnerability management through routine VAPT on live/production systems, using CVSS scoring and business impact analysis aligned with enterprise risk appetite; this reduced incidences by 80% in production. I deliver secure code reviews for web and mobile apps, support remediation with DevOps and engineering teams, and translate findings into actionable risk reporting—supporting ISO, NDPR, and PCI-DSS efforts with zero compliance violations in the 2023–2025 audit period. I supervise and mentor a team of 4 analysts protecting 100+ applications, and I’ve led major security work like Project Everest (migration to microservices) and API protections via Wallarm and an ongoing RASP integration for zero-day defense.