Open to opportunities

Jackson Wesonga

@jacksonwesonga

Message

Backend engineer building resilient, secure APIs and multi-tenant systems with a cybersecurity-first mindset.

Kenya

Message

What I'm looking for

I’m looking for Backend Engineering and Cybersecurity roles where I can build production APIs and multi-tenant systems with strong RBAC, OWASP-minded security, and practical threat research—turning security testing into resilient, reliable features.

I’m a Backend Engineer and Cybersecurity Analyst with 2+ years of professional experience delivering production-grade APIs, multi-tenant SaaS platforms, and cloud-deployed systems.

I build with a security mindset—applying OWASP Top 10 thinking across backend and web projects, from eliminating injection paths to strengthening access control. In my recent contract work, I implemented RBAC across 5+ user roles with “zero unauthorized-access incidents post-launch,” and improved API response time by ~35% by optimizing queries and workflows.

I’m hands-on with application and threat research: static and dynamic malware analysis, vulnerability research, and practical testing to uncover issues like XSS, IDOR, and authentication bypass. From Django/ FastAPI/ Laravel REST API work to OSINT & recon and security testing with Burp Suite and Wireshark, I focus on systems that are functional, resilient, and secure from the ground up.

Experience

Work history, roles, and key accomplishments

Full-Stack Software Engineer

Uborasoft Ventures Limited

May 2025 - Dec 2025 (7 months)

Built a multi-tenant institutional e-portfolio system with tenant isolation and access-control patterns aligned to OWASP A01, with 5+ RBAC roles and zero unauthorized-access incidents post-launch. Integrated Chatwoot with a Rasa AI chatbot (REST) to cut manual support workload by ~40%, set up CI/CD to reduce deployment time from ~90 minutes to under 10, and improved average API response time by ~3

Laravel PHP JavaScript Multi Tenant RBAC REST APIs Docker AWS Azure

OWASP Top 10 Web Developer

Onix-Market

Apr 2024 - Oct 2024 (6 months)

Developed a Django backend for product catalog and order pipelines and eliminated SQL injection vectors by using parameterized queries (OWASP A03). Restructured the MySQL database to improve query efficiency by ~30% and automated testing/deployment with GitHub Actions to remove manual release steps.

Django MySQL Parameterized SQL Queries RBAC GitHub Actions

Software Engineer Intern

Darasa Impact

May 2024 - Aug 2024 (3 months)

Contributed to the AnyDuka eCommerce platform by integrating payment gateway APIs with token-based authentication and secure session handling. Designed RBAC for admin, vendor, and customer roles (first formal access-control structure) and optimized high-frequency MySQL queries to reduce average page-load time by ~25%.

Laravel JavaScript Payment Gateways Token Based Authentication Secure Sessions RBAC API Security