Andrew Keitany Korir
Cybersecurity and DevOps Engineer
Passionate about securing digital infrastructure and streamlining development workflows. Specialized in web application penetration testing, cloud security, and CI/CD pipeline optimization.
Cybersecurity and DevOps Engineer
Passionate about securing digital infrastructure and streamlining development workflows. Specialized in web application penetration testing, cloud security, and CI/CD pipeline optimization.
Driven Cybersecurity Analyst and DevOps Engineer with 5+ years of experience securing web applications, automating cloud infrastructure, and enhancing system resilience through penetration testing and SOC monitoring. Improved security posture by conducting over 120 penetration tests, monitoring more than 1,200 monthly security events, and integrating security gates into CI/CD pipelines to prevent vulnerabilities from reaching production. Demonstrated expertise in Python scripting, AWS, Azure, SIEM tools, Docker, Terraform, and Ansible, with a proven ability to balance secure development and defense operations. Authored technical security publications and contributed to vulnerability research that strengthened industry practices. Looking to transfer these skills into a remote cybersecurity or DevSecOps role to help organizations build secure and scalable systems.
Conducted 45+ web application penetration tests aligned with OWASP WSTG/MSTG standards, identifying and documenting critical vulnerabilities to strengthen overall security posture.
Delivered 6 full-stack web applications using Springboot for backend services and modern JavaScript frameworks for frontend interfaces, improving system reliability and user experience
Conducted 75+ freelance penetration tests across diverse client systems, identifying high-impact vulnerabilities and strengthening security posture through responsible disclosure.
Designed and deployed a real-time school bus tracking solution using OpenStreetMap API and custom JavaScript logic, providing administrators with live operational data and giving parents greater visibility into student transport.
Assisted in the implementation and configuration of a company-wide Virtual Desktop Infrastructure (VDI), enhancing centralized management and security
Passbolt, your own password management solution. You can ensure that your organization's passwords are securely managed without relying on third-party cloud services
Wazuh, Your security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. Offering comprehensive security monitoring, intrusion detection, and log analysis capabilities.
Developed a comprehensive real-time mapping solution with advanced geospatial capabilities. Integrated multiple data sources and implemented robust security measures to protect location-based data.
Architected and developed a scalable Point of Sale system handling high transaction volumes. Implemented advanced security features including encryption, secure payment processing, and fraud detection.
Taita Taveta University
Comprehensive education in business technology, information systems, and digital innovation with a focus on cybersecurity and enterprise solutions.