Raphaelmary Iduma

Developed and executed a comprehensive technology roadmap, aligning cybersecurity strategies with business objectives to enhance overall security posture.

Directed cross-functional teams in the adoption of cutting-edge security technologies, improving system resilience and reducing attack surface by 25%.

Established robust DevSecOps practices across the organization, accelerating secure software delivery and reducing time-to-market for critical applications.

Cultivated a culture of security-first development, providing technical leadership and mentorship to engineering teams across various security domains.

Managed technology budgets and resources effectively, optimizing security investments while achieving key performance indicators and operational efficiency.

Integrated SAST, DAST, IAST, and GitHub Advanced Security (GHAS) into CI/CD pipelines, reducing pre-production vulnerabilities by 45-60%.

Conducted comprehensive web, mobile (WAPT/MAPT), and API penetration testing, identifying and remediating critical security flaws.

Implemented Secure SDLC (SSDLC) aligned with ISO 27001 and NIST standards, enhancing security posture across development stages.

Automated security testing workflows, reducing manual effort by over 40% and accelerating vulnerability detection.

Secured Docker & Kubernetes environments, reducing misconfigurations by 50% and strengthening container security.

Strengthened API security using OAuth, JWT, and rate limiting mechanisms, preventing unauthorized access and data breaches.

Designed and developed a comprehensive cybersecurity curriculum, including lesson plans, labs, and training materials, covering beginner to advanced topics.

Delivered engaging classroom lectures, workshops, and hands-on lab sessions across key domains like Network Security, Cryptography, Ethical Hacking, and Incident Response.

Demonstrated practical use of penetration testing tools, SIEM platforms, and network monitoring solutions, guiding students through vulnerability assessments and testing exercises.

Facilitated interactive discussions, case studies, and real-world simulations, enhancing critical thinking and problem-solving skills by 30%.

Encouraged collaboration and peer learning, improving student engagement and knowledge retention through practical assessments and quizzes.

Provided constructive feedback and mentorship, improving student outcomes and career readiness for over 50 students.

Conducted comprehensive security assessments, vulnerability scanning, and penetration testing on web and mobile applications, identifying and mitigating critical security risks.

Performed advanced reconnaissance and attack surface analysis using industry-standard tools such as Burp Suite, Nmap, Nessus, and Metasploit, enhancing threat detection capabilities.

Identified and exploited OWASP Top 10 vulnerabilities, including Injection attacks (SQLi, SSTI), Broken Access Control, Broken Authentication, and Cross-Site Request Forgery (CSRF).

Provided detailed vulnerability reports and remediation strategies, improving application security posture and reducing risk exposure by an estimated 20%.

Executed static and dynamic mobile application penetration testing (MAPT), identifying security flaws in Android applications and strengthening mobile security through secure configuration.

Assessed and hardened Linux and Windows systems, identifying misconfigurations and privilege escalation vectors, improving system-level security controls and reducing unauthorized access.

Designed and developed cross-platform mobile applications using Flutter and Dart, delivering high-performance solutions for diverse user needs.

Implemented responsive UI layouts and components, ensuring optimal user experience across various devices and screen sizes, enhancing accessibility by 25%.

Collaborated with UI/UX designers to translate mock-ups into interactive, visually appealing mobile app interfaces, ensuring pixel-perfect implementation.

Integrated mobile applications with backend APIs using RESTful principles, facilitating seamless data fetching and updates from server-side databases.

Handled asynchronous operations and HTTP requests using Dart's async/await syntax and libraries like Dio, optimizing data loading times by 15%.

Conducted security assessments, including static code analysis, dynamic application security testing (DAST), and penetration testing, to identify and remediate vulnerabilities.

Designed and developed cross-platform mobile applications using Flutter (Dart), delivering high-performance apps for both iOS and Android platforms.

Built responsive and adaptive UI components, ensuring consistent user experience across multiple devices, screen sizes, and orientations.

Collaborated closely with UI/UX designers to translate wireframes and design mock-ups into interactive, pixel-perfect interfaces.

Maintained design consistency and reusable component architecture, improving development efficiency and scalability across projects.

Developed unit and integration tests using Flutter's testing framework to ensure application reliability and reduce bugs by 10%.

Conducted static code analysis and application security testing (SAST/DAST) to identify and remediate vulnerabilities, applying secure coding practices to protect user data.

Performed comprehensive security assessments, including SAST, DAST, and penetration testing, to identify and remediate vulnerabilities across web applications and services.

Utilized industry-standard tools such as Burp Suite, OWASP ZAP, and Nessus to evaluate application security posture and uncover critical risks.

Collaborated with development teams to implement secure coding practices and embed security into the Software Development Lifecycle (SDLC) using a shift-left DevSecOps approach.

Conducted secure code reviews and architecture assessments, ensuring compliance with security standards, policies, and best practices (OWASP, ISO 27001, NIST).

Managed the vulnerability management lifecycle, including identification, prioritization (CVSS), tracking, and remediation of security issues, reducing critical vulnerabilities by 30%.

Automated security testing processes by integrating SAST, DAST, and dependency scanning tools into CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI), enabling continuous security validation.

Developed and maintained web applications using ReactJS, HTML, CSS, and JavaScript, integrating RESTful APIs with back-end systems to enhance functionality.

Implemented responsive design principles and mobile-first design, ensuring seamless user experience across desktop and mobile devices, increasing user engagement by 20%.

Built reusable and modular UI components using ReactJS and SASS, improving code efficiency and maintainability by 15% across projects.

Conducted rigorous code reviews and provided feedback, ensuring adherence to best practices, coding standards, and maintainable architecture.

Participated in Agile development methodologies, including sprint planning, daily stand-ups, and retrospectives, contributing to timely project delivery.

Optimized front-end performance for speed, scalability, and usability, reducing page load times by 10%.

Designed, implemented, and maintained enterprise network infrastructure, including routers, switches, and firewalls, ensuring high availability and performance.

Managed and maintained network topology documentation, IP addressing schemes, and architecture diagrams, ensuring reliable connectivity across multiple environments.

Monitored network performance, bandwidth utilization, and system health, identifying and resolving bottlenecks and outages to ensure minimal downtime.

Implemented and enforced network security policies and procedures, monitoring traffic for suspicious activity, supporting early threat detection.

Assisted in strengthening firewall rules, access controls, and perimeter security configurations, enhancing overall network security posture.

Supported development of network security frameworks and best practices, improving secure connectivity and infrastructure resilience across enterprise-wide initiatives.