Paul John

I am a senior penetration tester with hands-on experience performing black-box and white-box assessments across AWS, Azure, and on-premise environments. I discovered and helped mitigate multiple critical vulnerabilities including SQLi, RCE, broken authentication, and insecure deserialization.

I build automation to scale testing — developing Python scripts and a reconnaissance framework that integrated tools like Nmap, Dirsearch, and SQLmap, accelerating discovery by 60% and cutting manual test time by 40% when embedded in CI/CD pipelines.

I collaborate closely with DevOps and engineering teams to integrate security into CI/CD using GitHub Actions and Jenkins, and I contribute to vulnerability management, threat modeling, and secure SDLC practices. I also conduct vulnerability assessments with Nessus and OpenVAS and improve detection through red/blue team exercises.

I hold a CEH certification, a diploma in cybersecurity, and have formal computing coursework from MITx; I actively participate in OWASP Lagos, CTF platforms, and open-source InfoSec projects, bringing a continuous-learning mindset and practical delivery to enterprise security programs.