Open to opportunities

Umanhonlen Gabriel

@umanhonlengabriel

Message

I secure web, API, and mobile applications through penetration testing, code review, and secure SDLC practices.

Nigeria

Message

What I'm looking for

I'm looking to strengthen application security through hands-on testing, secure SDLC implementation, vulnerability research, and collaboration with development, security, and operations teams.

I've secured web platforms at First Bank of Nigeria through manual and automated code reviews across .NET, Java, Python, and Go, while integrating SAST and DAST into Azure DevOps CI/CD pipelines. I also managed Imperva WAF policies, tested iOS and Android applications, and mentored three junior engineers in secure coding and bug triage.

As an Application Security Consultant at Coolidge Solutions, I performed black-box and gray-box testing of web applications, APIs, and microservices, identifying IDOR, SSRF, XSS, and authentication bypass issues. My work is grounded in OWASP methodologies, penetration testing, reverse engineering, and clear technical and executive reporting.

Experience

Work history, roles, and key accomplishments

Application Security Consultant

Coolidge Solutions Ltd.

Jun 2025 - Aug 2025 (2 months)

Performed black-box and gray-box testing across various web apps, APIs, and microservices. Identified vulnerabilities including IDOR, SSRF, XSS, and auth bypass using Burp Suite Pro, ZAP, Nmap, and custom scripts.