Open to opportunities

Mariam Haruna

@mariamharuna

Message

Application Security & Penetration Testing Specialist securing enterprise banking systems, APIs, and apps.

Nigeria

Message

What I'm looking for

I want to bring hands-on AppSec/pentest expertise to a global security team—performing testing across network, web, and API layers, driving remediation to closure, and communicating risk clearly to both engineers and leadership.

I am an Application Security and Penetration Testing professional with 3+ years of experience securing enterprise banking systems, APIs, and web applications in a regulated financial environment. I specialize in offensive security testing across network, web, API, and application layers, and I translate technical risk into clear, actionable guidance for both engineering and executive stakeholders.

I operate confidently against international compliance frameworks including PCI-DSS, ISO 27001, and OWASP Top 10, and I coordinate end-to-end third-party VAPT engagements. Most recently, I have delivered clean ASV scan status through Qualys and Rapid7 Nexpose and managed vulnerability remediation and patch tracking to closure, while also producing detailed security reports that link vulnerabilities to business impact.

Experience

Work history, roles, and key accomplishments

Current

Vulnerability Assessment and Penetration Tester

Current

Union Bank of Nigeria

Aug 2025 - Present (11 months)

Conducts penetration testing and vulnerability assessments across enterprise applications, APIs, and network infrastructure, including coordination of third-party VAPT engagements. Provides ASV/PCI-DSS scanning support and drives remediation to closure with reporting for technical and executive stakeholders.

Penetration Testing Vulnerability Assessment ASVS Scanning PCI DSS Qualys Vulnerability Remediation

Enterprise Application Analyst

Union Bank of Nigeria

Aug 2022 - Aug 2025 (3 years)

Implemented and managed multi-factor authentication (MFA) across multiple enterprise applications and supported proactive monitoring and incident resolution. Performed business impact analysis and coordinated patches, vulnerability troubleshooting, and zero-downtime updates with developers and IT teams.

Multi Factor Authentication Application Monitoring Incident resolution Business Impact Patch Management Zero Downtime Deployments

Penetration Testing Trainee

CyberSafe Foundation – CyberGirls Fellowship

Jun 2024 - Dec 2024 (6 months)

Performed penetration testing and vulnerability assessments using tools and manual techniques, and produced reports with threat impact analysis and remediation priorities. Built automation for vulnerability assessment APIs integrating Nmap with Python and gained hands-on exposure across network, endpoint, IoT, and web application security.