Phinehas Narh

Owns product security for software products built with client partners, from security and risk review at the proposal stage through design, build, and release. Runs penetration tests before release and regular vulnerability assessments of live applications.

Performed web and API penetration testing and secure code review on production portals, finding auth bypass, broken access control, injection, and data exposure. Conducted STRIDE threat modeling and integrated SAST, DAST, SCA, image, and secret scanning into CI/CD gates.

Performed infrastructure and application security assessments supporting consolidation of 10+ high-resource applications onto centralized infrastructure, cutting server costs by 25%. Executed vulnerability assessments and penetration tests across 5+ systems, servers, and endpoints using Nessus and manual techniques, identifying and remediating 7 critical vulnerabilities.

Earned the Microsoft Certified: Azure Security Engineer Associate (AZ-500) certification in August 2026.

Earned the Certified AppSec Pentester (CAPen) certification in July 2026.

Earned the ISO 27001:2022 Lead Auditor certification in February 2026.

Earned the ISO/IEC 27701:2025 Lead Auditor certification in July 2026.

Earned the Certified Computer Forensic Analyst certification in June 2026.

Grade: 4.13/5.0 (First Class)

Pursued a Bachelor of Technology in Cyber Security, achieving a GPA of 4.13/5.0 (First Class).

Earned the AWS Certified Cloud Practitioner certification in February 2025.

Earned the Cyber Ops Associate certification in February 2024.

Earned the CCNA certification in May 2024.

Earned the Information Technology Infrastructure Library (ITIL) certification in April 2024.