Abnet M.

Application security and penetration testing for web, API, and mobile apps. Application Security Engineer and SOC experience at one of the largest telecom companies: vulnerability assessment, incident response, and DevSecOps hardening across Linux, containers, and cloud. • Web and API penetration testing (OWASP Top 10 / API Top 10), with clear PoCs and remediation guidance • Mobile application security testing (Android / iOS) - auth, storage, API abuse, and common mobile OWASP risks • Secure code review of application and AI-generated code - auth, injection, secrets, tenancy, unsafe patterns, deployment posture and fix guidance developers can ship • Vulnerability assessment and prioritized remediation with developers • DevSecOps: embed security in your pipeline (SAST, SCA, secrets scanning, container/image scanning) so issues get caught in code and builds, not in production • SOC / IR support: monitoring, triage, malware cleanup, and hardening after incidents OWASP Addis Ababa Chapter Lead organizing local AppSec community events and knowledge-sharing. If you need a scoped AppSec review, pentest (web/API/mobile), secure code review, or pipeline hardening, send the stack and timeline and I’ll propose a clear plan.