Umukoro Oghenekparobo Daniel

Cybersecurity Professional | Application Security & AI/ML Security Specialist

Lagos, NG.

About

Highly accomplished Cybersecurity Professional with expertise in Application Security, SOC operations, and Cloud Security, specializing in identifying and mitigating risks across modern software environments. Adept at leveraging Python for security automation, API security, threat modeling, and vulnerability management, with hands-on experience in AI/ML security risks including prompt injection attacks and OWASP Top 10 for LLM Applications. Passionate about designing and implementing resilient security measures for cloud workloads, containerized applications, and AI systems, driving responsible AI governance and robust ML infrastructure.

Work

Sterling Bank Plc

|

Application Security Engineer / Security Tester

Lagos, Lagos State, Nigeria

→

Summary

Led comprehensive application security assessments and integrated secure development practices, enhancing protection across web, mobile, API, and AI-driven systems within a major banking environment.

Highlights

Conducted over 100 security assessments of web and mobile applications using SAST/DAST tools (Fortify, Veracode, Burp Suite, OWASP ZAP), identifying critical vulnerabilities.

Designed and implemented robust API security policies and controls, reducing injection, authentication bypass, and API abuse threats by an estimated 25%.

Performed threat modeling using STRIDE and OWASP methodologies, proactively identifying and mitigating vulnerabilities early in the software development lifecycle.

Collaborated with 15+ development teams to embed secure coding practices and DevSecOps controls, improving overall security posture and reducing remediation efforts by 15%.

Developed Python scripts to automate vulnerability scanning and API security testing, enhancing efficiency and accuracy of security assessment reports by 20%.

Executed hands-on prompt injection testing and analyzed OWASP Top 10 for LLM Applications, identifying and mitigating potential attack vectors in AI-driven systems.

Applied API security and threat modeling expertise to AI-powered application architectures, assessing risks across model APIs, inference endpoints, and data pipelines.

Delivered security presentations and vulnerability reports to technical teams and senior stakeholders, facilitating faster remediation and improved security posture.

Sterling Bank Plc

|

Security Operations Center (SOC) Analyst

Lagos, Lagos State, Nigeria

→

Summary

Monitored and analyzed security alerts, investigated incidents, and implemented detection rules to enhance enterprise security posture across cloud and on-premise environments.

Highlights

Monitored and analyzed security alerts using Rapid7 InsightIDR (SIEM), detecting and responding to over 200 malicious activities across cloud and on-premise environments.

Investigated 50+ security incidents through log correlation, threat intelligence analysis, and root cause investigation, reducing mean time to detection by 10%.

Designed and implemented 30+ SIEM detection rules, dashboards, and playbooks, improving incident detection capabilities by 15%.

Conducted proactive threat hunting and anomaly detection activities, identifying 10+ emerging threats within enterprise systems.

Supported vulnerability management processes, including scanning, remediation tracking, and security validation, contributing to a 5% reduction in critical vulnerabilities.

Collaborated with IT teams during incident response efforts, ensuring timely containment and remediation of security threats, reducing potential impact by 20%.

Soft Solutions Ltd

|

Cybersecurity Engineer (Intern)

Lagos, Lagos State, Nigeria

→

Summary

Implemented and managed cybersecurity solutions, performed security assessments, and supported incident response for diverse client infrastructure.

Highlights

Implemented and configured cybersecurity solutions, including IDS/IPS, SIEM systems, firewalls, and encryption technologies, for 5+ client environments.

Conducted security assessments and vulnerability analyses for client infrastructure, identifying over 50 weaknesses and recommending remediation strategies.

Supported incident response activities, assisting in the detection and mitigation of 10+ cyber threats affecting client infrastructure.

Assisted with the deployment of security monitoring solutions, improving threat detection and response capabilities by 15% for client systems.

Provided technical guidance and security awareness training to staff and clients, improving adherence to security best practices and incident response protocols.

Education

Manchester Metropolitan University

Manchester, England, United Kingdom of Great Britain and Northern Ireland
→
MSc Electronic Engineering Grade: Merit

Manchester Metropolitan University

Manchester, England, United Kingdom of Great Britain and Northern Ireland
→
BEng (Hons) Electrical & Electronic Engineering Grade: Second Class Upper (2:1)

Certificates

CompTIA Security+ (SYO-601)

CompTIA

AWS Certified Security – Specialty

AWS

Certified API Security Analyst – APIsec University

APIsec University

McAfee Certified Product Specialist – Endpoint Security

McAfee

ISO 27017 Cloud Security Manager

ISO

Skills

AI/ML Security

AI / ML Security, Prompt Injection Security, Adversarial Machine Learning, OWASP Top 10 for LLM Applications, Responsible AI Governance, Resilient ML Infrastructure.

Application Security

Application Security Testing (SAST / DAST), Threat Modeling (STRIDE, OWASP Threat Modeling), API Security & Secure Development, Vulnerability Management, DevSecOps & CI/CD Security, Container Security (Docker), Secure Architecture & Risk Assessment, OWASP Top 10, API Security Testing.

Cloud Security

Cloud Security (AWS), AWS Security Services, ISO 27017 Cloud Security, Skyhigh CASB.

SOC & Incident Response

SIEM Monitoring & Incident Response, Security Monitoring, Incident Response, Threat Hunting, Log Correlation, Threat Intelligence Analysis, Rapid7 InsightIDR (SIEM), CrowdStrike EDR.

Security Governance & Compliance

Security Governance & Compliance, Security Policies & Controls, Security Awareness Training.

Programming & Automation

Python, JavaScript, C, HTML, CSS, Security Automation.

Operating Systems & Infrastructure

Linux & Windows Administration, Docker Containers, IDS/IPS, Firewalls, Encryption Technologies.

Security Tools

Burp Suite Pro, Fortify, OWASP ZAP, Rapid7 InsightIDR (SIEM), Rapid7 InsightVM, McAfee Endpoint Security, CimTrak FIM, Postman, MobSF.