Leonard Ndulue
@leonardndulue
Application Security Engineer specializing in SAST, DAST, WAF, and secure SDLC integration to reduce real-world risk.
NigeriaWhat I'm looking for
I am an Application Security Engineer with expertise in Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Web Application Firewalls (WAF). At Unity Bank PLC, I conduct security testing with tools like Checkmarx, Burp Suite, WebInspect, and OWASP ZAP, and I lead secure code reviews to identify vulnerabilities such as SQL injection, XSS, and CSRF.
I strengthen application security posture through secure SDLC methodologies, threat modeling, and risk assessments, and I produce detailed vulnerability management reports with clear recommendations. I also built an API security solution with JWT authentication and RBAC, and I have mentored 30+ cybersecurity mentees globally through Product Hub Africa.
Experience
Work history, roles, and key accomplishments
Application Security Engineer
Unity Bank PLC
Jul 2023 - Present (3 years)
Conduct SAST, DAST, and Software Composition Analysis (SCA) scans using tools including Checkmarx, Burp Suite, WebInspect, and OWASP ZAP. Lead secure code reviews, perform threat modeling and risk assessments, manage vulnerabilities, and configure WAFs to improve application security.
Cybersecurity Career Mentor
Product Hub Africa
Jan 2025 - Present (1 year 6 months)
Mentored 30+ cybersecurity mentees globally through Product Hub Africa.
Public Relations Officer
NYSC
Jan 2022 - Present (4 years 6 months)
Served as a Public Relations Officer for NYSC.
Education
Degrees, certifications, and relevant coursework
Checkmarx
Checkmarx One for Developers Certification, Application Security
Completed the Checkmarx One for Developers certification in 2025.
APIsec
APIsec Certified Practitioner (ACP), Application Security
Earned the APIsec Certified Practitioner (ACP) certification in 2025.
ISO/IEC 27001:2022
Information Security Associate (ISO/IEC 27001:2022), Information Security
Earned the ISO/IEC 27001:2022 Information Security Associate certification in 2024.
APIsec
Certified Application Security Engineer (CAP), Application Security
Earned the Certified Application Security Engineer (CAP) certification in 2024.
Checkmarx
Checkmarx SAST Certified Engineer (Cx SAST CE), SAST
Earned the Checkmarx SAST Certified Engineer (Cx SAST CE) certification in 2024.
Cloud Mavin’s Cyber Academy
Application Security Track Certificate, Application Security
Completed the Application Security track at Cloud Mavin’s Cyber Academy in 2024.
NYSC
Certificate of National Service, National Service
Completed National Service and received a Certificate of National Service in 2022.
Edo State University
Bachelor of Science, Computer Science
2017 - 2021
Earned a B.Sc. in Computer Science from Edo State University, Nigeria, from 2017 to 2021.
Complete Computers & Technology Limited
Certificate of Achievement
Received a Certificate of Achievement from Complete Computers & Technology Limited in 2020.
Availability
Location
NigeriaAuthorized to work in
Job categories
Skills
Interested in hiring Leonard?
You can contact Leonard and 90k+ other talented remote workers on Himalayas.
Message LeonardGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
