Peter Musembi Wambua

U

Senior Security and InfrastructureAssociate

Ultratude Tech,

Apr 2024 - Jan 2025 (10 months)

• Performed vulnerability assessments on the company's infrastructure built in .NET(C#) to eliminate the existing vulnerabilities, and wrote pentest reports leading to a 60% reduction in vulnerabilities and improving overall security posture. • Implemented SIEM tools in Azure, monitored over 1000 logs daily, and investigated the security events. • Collaborated with the development team to integrate security best practices throughout the software development lifecycle leading to 40% more secure software. • Additionally, set up IDS and Firewalls in cloud environments such as GCP and AWS, ensuring robust security measures were in place. Conducted vulnerability assessments in alignment with NIST, ISO, and GDPR regulations, enhancing c

Bug Bounty Hunter and Freelancer

HackerOne, Upwork

May 2023 - Current (3 years 3 months)

● Discovered and responsibly disclosed vulnerabilities across web, API, and mobile applications, including critical issues such as IDORs, XSS, SSRF, and access control flaws, helping companies strengthen their security postures. Additionally, my knowledge of GCP and AWS allowed me to assess cloud-based applications effectively, ensuring comprehensive security evaluations. ● Conducted end-to-end penetration testing engagements on web applications for UpWork clients, including black-box and authenticated testing, aligning with OWASP Top 10 and NIST standards. My familiarity with ISO/IEC 27001 and GDPR standards further enhanced my ability to ensure compliance during testing processes. ● Delivered professional pentest reports with detailed

H

Red TeamEngineer

Hackerbro Technologies,

Jan 2023 - Dec 2023 (1 year)

• Conducted penetration testing simulations on over 15 companies' systems, identifying and exploiting high-risk vulnerabilities, thereby enhancing the organizations' cybersecurity resilience by over 50%. • Implemented, tested, and operated security software in compliance with the technical reference architecture. Performed ongoing security testing and code reviews to uncover vulnerabilities and stay current on IT security trends. • Generated comprehensive reports on penetration testing activities, highlighting over 50 key findings and recommendations over the internship period, leading to over 50% improvement in the organization's overall security posture. • Conducted vulnerability assessments in alignment with NIST and ISO/IEC 27001

C

CTF Player

Cyb3rk1math1

Jul 2022 - Current (4 years 1 month)

• Contributed to this award-winning CTF team, consistently placing in the top 4 of over 15 national and international competitions, showcasing advanced skills in offensive security and team collaboration. • Specialized in penetration testing challenges (web, Android, boot2root), achieving a 90% success rate in solving security vulnerabilities, further honing practical skills in exploitation and remediation techniques. • Collaborated with team members to develop innovative solutions to problems, completing over 100 challenges across various categories, and demonstrating teamwork and problem-solving skills. Constantly learned over platforms like TryHackMe, HackTheBox, and OffSec. Additionally, employed agile methodologies to design cha

S

Network Engineer Intern

State Law Offices - Kenya

May 2021 - Dec 2021 (8 months)

● Designed and implemented network architecture enhancements resulting in a 20% increase in network efficiency within the Offices of the President and Attorney General. ● Successfully implemented network security measures, reducing security incidents by 30% and preventing unauthorized access to critical systems, and also provided Information Technology support to over 50 staff members achieving a 95% satisfaction rate.

Peter Musembi Wambua

About

Detail

Timeline

Résumé