HimalayasHimalayas logo
Olaleye Lekan JosephOJ
Open to opportunities

Olaleye Lekan Joseph

@olaleyelekanjoseph

Security engineer building production-ready AppSec and DevSecOps automation to reduce deployment risk.

Nigeria
Message

What I'm looking for

I’m looking for a DevSecOps/SecOps role where I can automate AppSec (SAST/DAST, secrets detection, hardening) and build security tools that protect real deployments in cloud CI/CD environments.

I’m a Software Security Engineer (SecOps / DevSecOps) with 3+ years of experience designing and deploying production-ready security tools, hardening web applications, and embedding security into CI/CD pipelines. I translate security research into practical, automated defenses that reduce real deployment risk.

In my work, I’ve designed and shipped 5+ security tools—like a network vulnerability scanner (Nmap + MITRE ATT&CK mapping), log analyzer, password strength analyzer, SSL/TLS certificate checker, and file integrity monitoring using SHA-256/512/MD5. I harden backends with OWASP-compliant input validation, CORS policies, and rate-limiting controls, and I automate SSL/TLS certificate chain verification with expiry monitoring and TLS cipher-suite grading.

I also build secure authentication and API access patterns, leveraging OAuth2/JWT, token rotation, and privilege-separated access control. From threat modeling and code reviews to SAST/DAST scanning and secrets detection in CI/CD, my focus stays on shipping secure systems—supported by OWASP-aligned AppSec practices and cloud security across AWS, Azure, and GCP.

Experience

Work history, roles, and key accomplishments

IF
Current

Software Security Engineer

Independent (Freelance)

Jan 2022 - Present (4 years 4 months)

Designed and shipped 5+ production-ready security tools, including an Nmap-based scanner with MITRE ATT&CK mapping, log/password/SSL checkers, and SHA-256/512/MD5 file integrity monitoring. Hardened web backends with OWASP-compliant validation, CORS and rate limiting, and embedded SAST/DAST + secrets detection into CI/CD to reduce deployment security risk.

Education

Degrees, certifications, and relevant coursework

OWASP logoOW

OWASP

Introduction to Critical Infrastructure Security, Critical Infrastructure Security

Introduction to Critical Infrastructure Security (OWASP) completed in 2026.

Google logoGO

Google

Google Analytics Certification, Analytics

Google Analytics certification earned in 2026.

Cisco Networking Academy logoCA

Cisco Networking Academy

Ethical Hacker (Student Level), Ethical Hacking

Ethical Hacker (Student Level) completed through Cisco Networking Academy in 2026.

Google logoGO

Google

Google Cloud Developer, Cloud Development

Google Cloud Developer certification (Google GADS) earned in 2022.

Find your dream job

Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan