Sterling Bank Plc
|Application Security Engineer / Security Tester
Lagos, Lagos State, Nigeria
Summary
Led comprehensive application security assessments and integrated secure development practices, enhancing protection across web, mobile, API, and AI-driven systems within a major banking environment.
Highlights
Conducted over 100 security assessments of web and mobile applications using SAST/DAST tools (Fortify, Veracode, Burp Suite, OWASP ZAP), identifying critical vulnerabilities.
Designed and implemented robust API security policies and controls, reducing injection, authentication bypass, and API abuse threats by an estimated 25%.
Performed threat modeling using STRIDE and OWASP methodologies, proactively identifying and mitigating vulnerabilities early in the software development lifecycle.
Collaborated with 15+ development teams to embed secure coding practices and DevSecOps controls, improving overall security posture and reducing remediation efforts by 15%.
Developed Python scripts to automate vulnerability scanning and API security testing, enhancing efficiency and accuracy of security assessment reports by 20%.
Executed hands-on prompt injection testing and analyzed OWASP Top 10 for LLM Applications, identifying and mitigating potential attack vectors in AI-driven systems.
Applied API security and threat modeling expertise to AI-powered application architectures, assessing risks across model APIs, inference endpoints, and data pipelines.
Delivered security presentations and vulnerability reports to technical teams and senior stakeholders, facilitating faster remediation and improved security posture.