Open to opportunities

jackson mativo

@jacksonmativo

Message

Cybersecurity specialist and software engineer focused on API security and VAPT.

Kenya

Message

What I'm looking for

I seek roles where I can secure APIs and cloud infrastructure, contribute to SSDLC, perform VAPT, and grow in a collaborative, security-driven engineering team.

I am a cybersecurity specialist and software engineer with hands-on corporate security experience at Safaricom Kenya, focused on vulnerability assessments, API security testing, and compliance audits.

I developed PIIShieldPad, a privacy-first application for secure AI interactions, and improved CI/CD pipeline security by integrating automated security checks aligned with SSDLC practices.

My technical toolkit includes Burp Suite, Jenkins, Google Cloud, Python, React.js, and many industry tools and standards such as ISO 27001 and OWASP Top 10.

I leverage six years of architectural design and freelance project management experience to bring creative problem-solving, clear communication, and disciplined delivery to security engineering challenges.

Experience

Work history, roles, and key accomplishments

Current

Bug Bounty Hunter

Current

HackerOne

Jan 2025 - Present (9 months)

Conducts authorized vulnerability discovery and responsible disclosures on public programs, currently focusing on Vodafone Oman and validating exploitable vulnerabilities via coordinated reporting.

Bug Bounty API Testing Vulnerability Reports Burp suite Recon Exploit Validation Responsible Disclosure

Architectural Designer

Self-Employed

Jan 2018 - Aug 2025 (7 years 7 months)

Designed residential and commercial buildings and managed end-to-end design and project delivery for clients across multiple Kenyan counties, demonstrating planning, creativity and client management.

Architectural Design Project Management Client Relations Drafting Planning

Cybersecurity Intern

Safaricom

Mar 2024 - Sep 2024 (6 months)

Conducted penetration testing across infrastructure, applications, APIs and networks, identifying critical vulnerabilities in 20+ APIs and 3 websites and assessed 10 production databases for security flaws; improved CI/CD pipeline security by integrating automated security checks aligned with SSDLC.