Looking for a job

Gladwell nganga

@gladwellnganga

Message

I test financial platforms, uncover vulnerabilities, and automate actionable security monitoring.

Kenya

Message

What I'm looking for

I'm looking to apply hands-on penetration testing, threat detection, and security automation skills to help protect web, API, network, and financial technology environments.

I've conducted VAPT engagements on Craft Silicon internet banking platforms, uncovering authentication, session-management, and input-validation weaknesses across client and admin portals. I produce reproducible, risk-rated findings with practical remediation guidance mapped to OWASP frameworks.

I also administered Wazuh across 38 Windows agents and built a Python-to-SMS integration for real-time threat alerts. My hands-on work spans web, API, and network testing, secure configuration reviews, Python and Bash automation, and security auditing.

Experience

Work history, roles, and key accomplishments

IT Security Intern (Cybersecurity)

Craft Silicon

Jan 2026 - Jun 2026 (5 months)

Executed VAPT engagements on internet banking platforms, identifying authentication, session management, and input validation weaknesses. Administered Wazuh SIEM across 38 Windows agents and built a Python integration for real-time threat alerting.

Vulnerability Assessment Penetration Testing OWASP Top 10 OWASP API Security Top 10 Wazuh SIEM Python BASH Security Auditing Secure Configuration Review

ICT Intern

Kenversity SACCO

Aug 2025 - Oct 2025 (2 months)

Provided ICT support across departments, managing user access, system maintenance, and technical issue resolution in a regulated financial services environment.

ICT Support User Access Management System Maintenance Documentation Policy Compliance

Network Security Configuration

Independent Project

Aug 2025 - Aug 2025 (0 months)

Designed and hardened a UFW firewall on Kali Linux, integrating Fail2Ban for automated threat mitigation and Bash scripting for rule automation. Validated configuration with Nmap scanning and brute-force simulation testing.

UFW Firewall Configuration Fail2Ban BASH Kali Linux Nmap Brute Force Simulation

Web Application Penetration Testing

Independent Project

Jul 2025 - Jul 2025 (0 months)

Conducted a structured security assessment of DVWA, identifying 5 critical vulnerabilities including SQL Injection, XSS, OS command injection, and file inclusion. Produced a detailed findings report with remediation recommendations.

Penetration Testing SQL Injection XSS OS Command Injection File Inclusion Sqlmap Manual Penetration Testing