Senior Full-Stack DevSecOps Security Leader

Location:

Addis Ababa, Ethiopia

Posted:

September 27, 2026

Contact this candidate

Resume:

JEMAL EYASU AHMED

Senior Software Engineer Full-Stack Developer DevOps & DevSecOps Engineer Cybersecurity & IS Security Manager

Addis Ababa, Ethiopia

Phone: +251*********

Email: *********@*****.*** ********@*****.***

LinkedIn: linkedin.com/in/jemaleyasu

GitHub: github.com/jemal1444

PROFESSIONAL SUMMARY

Senior Full-Stack Software Engineer, DevOps/DevSecOps Engineer, and Information Security Leader with 15+ years of progressive experience spanning software engineering, application development, cybersecurity, information security governance, DevOps, infrastructure management, database administration, and enterprise technology operations.

Proven ability to design, develop, secure, deploy, and manage enterprise-grade applications and technology platforms throughout the complete software development lifecycle—from requirements analysis and architecture to development, testing, deployment, security assessment, and production operations.

Strong hands-on expertise in full-stack development, secure software architecture, RESTful and GraphQL APIs, microservices, DevOps automation, CI/CD pipelines, containerization, infrastructure management, cybersecurity, vulnerability management, penetration testing, SIEM, incident response, and information security risk management.

Experienced in developing modern and scalable applications using React, Next.js, Vue.js, JavaScript, TypeScript, Node.js, Express.js, Python, FastAPI, Django, Flask, Spring Boot, and ASP.NET Core. Skilled in building and managing CI/CD environments using Docker, Kubernetes, Git, GitHub Actions, Linux, and automation tools.

Strong DevSecOps mindset, integrating security throughout the Software Development Life Cycle through secure coding practices, vulnerability assessment, penetration testing, source-code analysis, dependency security, container security, automated testing, and security controls within CI/CD pipelines.

Experienced in enterprise security leadership, including security strategy, governance, risk assessment, security architecture, SIEM, WAF, IDS/IPS, firewall management, VPN security, incident response, digital forensics, vulnerability management, and security monitoring.

Recognized for combining software engineering, DevOps, DevSecOps, cybersecurity, infrastructure, and leadership expertise to deliver secure, scalable, reliable, and business-focused technology solutions.

CORE COMPETENCIES

Software Engineering & Full-Stack Development

React

Next.js

Vue.js

JavaScript

TypeScript

Node.js

Express.js

Python

FastAPI

Django

Flask

Spring Boot

ASP.NET Core

RESTful APIs

GraphQL

Microservices

WebSocket Applications

Secure Software Development

DevOps & DevSecOps

CI/CD Pipeline Design

GitHub Actions

Git

Docker

Kubernetes

Containerization

Deployment Automation

Infrastructure Automation

Linux Administration

Secure CI/CD

DevSecOps Integration

Automated Testing

Source Code Security

Dependency Security

Container Security

Application Security Testing

Cybersecurity & Information Security

Information Security Governance

Cybersecurity Strategy

Security Risk Assessment

Vulnerability Assessment

Penetration Testing

Web Application Security

API Security

Mobile Application Security

SIEM

Security Monitoring

IDS/IPS

Web Application Firewall (WAF)

Firewall Security

VPN Security

Incident Response

Digital Forensics

Threat Intelligence

Security Policies and Standards

Information Systems Auditing

Infrastructure & Systems

Enterprise Infrastructure Management

Windows Server

Linux Systems

Network Administration

Server Administration

System Performance Optimization

Capacity Planning

High Availability

Backup and Recovery

System Monitoring

Infrastructure Security

Databases & Data

PostgreSQL

Oracle Database

MySQL

MongoDB

SQL

Database Administration

Performance Tuning

Backup and Recovery

Data Integrity

Python Data Processing

Data Analysis

Data Pipelines

PROFESSIONAL EXPERIENCE

IS Security Manager / Information Security Leadership

2021 – Present

Key Responsibilities

Lead enterprise-wide information security strategy, governance, risk management, and security operations.

Develop and implement security policies, procedures, standards, and security control frameworks.

Conduct cybersecurity risk assessments and identify security gaps across applications, infrastructure, networks, and enterprise systems.

Lead vulnerability assessments and penetration testing activities.

Coordinate remediation activities with infrastructure, software development, database, and business teams.

Design and improve secure network architectures using firewalls, VPNs, IDS/IPS, WAF, and SIEM technologies.

Lead cybersecurity incident response, investigation, containment, recovery, and post-incident analysis.

Support digital forensics and security investigations.

Monitor enterprise security events and coordinate responses to security threats.

Support regulatory, audit, and information security compliance requirements.

Provide security guidance for digital banking, applications, APIs, infrastructure, and enterprise technology platforms.

Promote security awareness and secure technology practices across technical and business teams.

Key Achievements

Contributed to reducing security risk exposure by approximately 40% through vulnerability assessments, penetration testing, risk identification, and remediation coordination.

Strengthened enterprise security architecture through the implementation and enhancement of security controls.

Improved incident response processes and reduced the potential business impact of security incidents.

Enhanced collaboration between software development, infrastructure, database, and security teams.

Infrastructure Manager

2018 – 2021

Key Responsibilities

Managed enterprise IT infrastructure and critical technology services.

Ensured high availability, reliability, and performance of servers, databases, networks, and enterprise applications.

Led infrastructure upgrades, modernization, performance tuning, and capacity planning initiatives.

Managed system monitoring, troubleshooting, and operational support.

Coordinated infrastructure projects and technical teams.

Implemented security controls and operational procedures to improve infrastructure resilience.

Supported business-critical applications and enterprise services.

Key Achievements

Improved infrastructure reliability and operational efficiency through system optimization.

Supported infrastructure modernization and technology upgrade initiatives.

Improved system monitoring and proactive issue detection.

Strengthened backup, recovery, and operational resilience processes.

Infrastructure Lead / Database Administrator

2013 – 2017

Key Responsibilities

Administered and maintained PostgreSQL, Oracle, and MySQL database environments.

Performed database performance monitoring and optimization.

Managed database backup, recovery, and data protection processes.

Ensured database availability, integrity, security, and reliability.

Supported critical enterprise applications and databases.

Performed SQL troubleshooting and performance tuning.

Worked with application and infrastructure teams to resolve database and system issues.

Key Achievements

Improved database performance through optimization and performance tuning.

Strengthened database backup and recovery procedures.

Supported business-critical systems with strong availability and operational stability.

Improved data integrity and database operational processes.

System Administrator & Network Administrator

2010 – 2013

Key Responsibilities

Managed enterprise servers, operating systems, networks, and IT services.

Configured and maintained network security controls.

Supported server deployment, configuration, troubleshooting, and maintenance.

Monitored system and network performance.

Implemented proactive monitoring and maintenance procedures.

Supported enterprise users and business systems.

Assisted with infrastructure security and technology upgrades.

Key Achievements

Improved system stability through proactive monitoring and maintenance.

Reduced operational downtime through improved troubleshooting and system administration practices.

Strengthened network and server security controls.

IT Expert

2007 – 2009

Key Responsibilities

Provided IT technical support and troubleshooting.

Supported computer systems, networks, and enterprise technology environments.

Assisted with infrastructure setup, maintenance, and upgrades.

Supported users and resolved hardware and software issues.

Built foundational experience in enterprise IT operations and technology support.

SOFTWARE ENGINEERING, DEVOPS & DEVSECOPS EXPERIENCE

Throughout my career, I have contributed to the design, development, deployment, security, and operation of enterprise software systems.

Full-Stack Development

Developed scalable web applications using React, Next.js, Vue.js, Node.js, Express.js, JavaScript, and TypeScript.

Designed backend services and APIs using Node.js, Express.js, Python, FastAPI, Django, Flask, Spring Boot, and ASP.NET Core.

Developed RESTful APIs and system integration services.

Worked with relational and NoSQL databases, including PostgreSQL, Oracle, MySQL, and MongoDB.

Designed secure authentication, authorization, and API security mechanisms.

Developed real-time applications using WebSocket technologies.

DevOps

Designed and implemented CI/CD pipelines to automate application build, testing, and deployment processes.

Used Git and GitHub Actions for source control and deployment automation.

Implemented Docker-based application containerization.

Worked with Kubernetes and container orchestration concepts.

Managed Linux-based application environments.

Improved software deployment speed and consistency through automation.

DevSecOps

Integrated security into software development and deployment workflows.

Conducted source-code and application security assessments.

Performed vulnerability assessment and penetration testing.

Supported secure coding and secure application architecture.

Assessed API security and web application vulnerabilities.

Implemented security testing practices within the software development lifecycle.

Worked to bridge development, operations, infrastructure, and cybersecurity teams.

Key Impact

Improved user engagement by approximately 30% through the development of scalable and user-focused applications.

Reduced deployment time by approximately 50% through CI/CD automation and DevOps practices.

Improved application scalability, reliability, and deployment consistency.

Strengthened security integration throughout the software development lifecycle.

SELECTED PROJECTS

Online Examination Management System

Designed and developed a secure online examination platform.

Key Features

User authentication and authorization

Online examination management

Real-time monitoring

Automated grading

Secure access controls

Database integration

Administrative dashboard

Technologies: Full-Stack Web Development, APIs, Databases, Authentication, Security Controls

E-Commerce Platform

Developed a scalable e-commerce application supporting online transactions and order management.

Key Features

Product management

User authentication

Shopping functionality

Payment integration

Order management

Real-time order tracking

Administrative capabilities

Technologies: Full-Stack Development, REST APIs, Databases, Frontend and Backend Integration

Real-Time Chat Application

Designed and developed a real-time communication application.

Key Features

Real-time messaging

WebSocket communication

User authentication

Secure communication architecture

Scalable backend services

Technologies: JavaScript/TypeScript, Node.js, WebSockets, APIs, Databases

Banking Dashboard Portal

Developed a secure dashboard platform supporting business and operational decision-making.

Key Features

Secure user authentication

Role-based access

Real-time data presentation

Analytics and reporting

Dashboard visualization

Integration with backend systems

Focus Areas: Application Security, Secure APIs, Data Protection, Access Control, Enterprise Integration

TECHNICAL SKILLS