Security Engineer Key Management

I’m just EMONENA OBRIK-ULOHO

**** **** ***** ****, ********, Texas · 346-***-****

********@*****.*** · https://www.linkedin.com/in/emonena-obrik-uloho/

Experienced Security Engineer with a robust background in IT infrastructure, cybersecurity, and security engineering. I possess expertise in cryptography, key management, cloud security, and online application security. My extensive experience includes overseeing data protection, ensuring regulatory compliance, and promoting secure coding practices across multiple enterprises. I am proficient in constructing security solutions and streamlining key management processes using Python. I am deeply committed to safeguarding critical data and systems, setting industry benchmarks, and implementing best practices to enhance security measures.

EXPERIENCE

FEB 2023 – PRESENT

PRODUCT SECURITY ENGINEER

center for information technology excellence (C.I.T.E), TEXAS, USA

Developed and executed cryptographic methods (AES, RSA, ECC) to protect sensitive data, leading to a 50% decrease in data breaches.

Created a key management system using Python's cryptography module to ensure secure creation, distribution, and rotation of cryptographic keys.

Deployed a Public Key Infrastructure (PKI) system to enhance secure and authenticated digital communications, resulting in improved trust and integrity.

Implemented a comprehensive incident response strategy, encompassing threat detection, analysis, and mitigation, significantly enhancing the organization's capacity to address security problems.

Conducted regular security awareness training for staff and students, leading to increased security awareness and a reduction in phishing attempts.

Regularly conducted risk assessments and vulnerability scans using automated tools, proactively identifying and addressing potential security issues.

AUG 2019 – NOV 2022

INFORMATION SECURITY ANALYST

true blue energy

Engaged with a technical client base of engineers, effectively communicating security and testing requirements, highlighting risks, and advocating secure development methodologies.

Conducted detailed risk assessments for critical infrastructure, identifying and remediating over 150 high-risk vulnerabilities, improving system integrity by 80%.

Played a pivotal role in achieving and maintaining compliance with international security standards (ISO 27001), resulting in a 100% success rate in annual audits.

Authored a comprehensive set of security policies and procedures, strengthening the company's cybersecurity posture and increasing system resilience.

Negotiated contracts with cybersecurity vendors, securing advanced security solutions while reducing annual security expenses by 20%.

JUL 2017 – JUL 2019

WEB APPLICATION SECURITY ENGINEER

STANDARD TESTING & INSPECTION SERVICES.

Conducted comprehensive security assessments and implemented OWASP top 10 mitigations, reducing vulnerabilities in critical web applications by 80%.

Developed Python-based tools for automated vulnerability scanning and remediation, improving incident response times and streamlining security workflows.

Integrated security best practices into the Software Development Life Cycle (SDLC), conducting regular code reviews and security training sessions, resulting in a 60% decrease in security-related defects.

Led penetration testing efforts to identify and address security weaknesses in web applications, providing detailed reports and actionable recommendations for improvement.

Implemented robust authentication and authorization mechanisms using modern security standards (OAuth 2.0, JWT), enhancing access control and user management.

Ensured the protection of sensitive data through encryption, tokenization, and data masking techniques, reducing the risk of data breaches and unauthorized access.

Utilized Docker to containerize and isolate web applications, creating reproducible environments for testing and development.

NOV 2015 – JUN 2017

IT INFRASTRUCTURE SECURITY ENGINEER

ARCO INTEGRITY SOLUTIONS LIMITED

Spearheaded the implementation of secure boot and firmware updates for IoT devices, ensuring device integrity and protection against unauthorized access.

Managed IoT device provisioning and secure communication using AWS IoT Core and Python SDK, enhancing device management and security monitoring capabilities.

Implemented security features for EC2 Nitro instances, including TPM-based secure key storage and measured boot, ensuring the integrity of cloud-hosted applications.

Designed and implemented network security measures, including firewall rules and intrusion detection systems, to protect against external and internal threats.

Established a vulnerability management program, using automated tools to identify and remediate security vulnerabilities across the infrastructure.

Developed and enforced security policies and procedures, ensuring compliance with industry standards and fostering a culture of security within the organization.

Automated security configurations and patch management using Ansible, ensuring consistent security posture and reducing manual errors.

EDUCATION

MASTER OF SCIENCE IN COMPUTER INFORMATION SYSTEMS

PRAIRIE VIEW a&m university, texas, usa

SKILLS

Programming Languages: Python, C++, Java, HTML, CSS, JavaScript, SQL, Bash

DevOps & Automation: Terraform, Ansible, Kubernetes, CI/CD, Jenkins, Airflow, AWS, Docker

Data Science & Machine Learning: Pandas, TensorFlow, Scikit-Learn

Security & Compliance: Cryptography, PKI, PCI-DSS

Development Environments: PyCharm, VSCode

Database Management: MySQL, Oracle Web Service

Virtualization: VirtualBox

Version Control: Git-CLI

Soft Skills: Communication, Conflict Resolution, Collaboration, Strong Analytical Skills, Articulate Speaking

CERTIFICATIONS

CompTIA Security+ Certification – May 2024

CompTIA CySA+ Certification – April 2024

Certified Information Security Manager (CISM) – June 2024

AWS Certified Solution Architect – Feb 2024

PROFESSIONAL AFFILIATIONS

National Society of Black Engineers (NSBE) – Member (2023-Present)

Information Systems Audit and Control Association (ISACA) – Member (2024-Present)

Contact this candidate