$ cat profile.txtOffensive Security Engineer and Penetration Tester based in Nairobi, Kenya.
Expertise in bug bounty research, vulnerability & malware research, and red team operations.
I find the gaps before attackers do — then help organizations close them for good.
Currently serving as Cyber Security Engineer @ Durrafx and Information Security Engineer @ Foresight Tech Group, while running active bug bounty research on HackerOne. Member of the Kenya Cyber Security and Forensic Association.
- 🔴 Red teaming payment & authentication platforms at Durrafx
- 🐛 Hunting bugs across web, API, and mobile targets on HackerOne
- 🔐 SOC operations & log analysis at Foresight Tech Group
- 📖 Deepening expertise in mobile app security and malware analysis
Offensive
Penetration Testing Red Teaming Bug Bounty Vulnerability Research Malware Analysis Social Engineering
Domains
Web Security API Security Mobile Security Network Security Financial Systems
Frameworks & Standards
OWASP PTES PCI-DSS MITRE ATT&CK
Languages & Tools
Python Go Bash Burp Suite Docker Metasploit Wireshark Nmap SIEM
Defensive
Log Analysis Incident Response Threat Modeling IDS/IPS Secure Code Review
| Project | Description | Stack |
|---|---|---|
| ARP | ARP spoofing tool — intercepts DNS traffic and exfiltrates to a remote server | Python, Scapy |
| PhoneBook-Vault | All possible Kenyan phone number combinations for OSINT/recon use | Data |
| Note-Weave | Minimal, elegant note-taking app | JavaScript |
🖊️ Writeups & disclosures coming soon — follow to stay updated.
$ cat availability.txt
✓ Open to penetration testing engagements
✓ Available for red team operations
✓ Bug bounty collaborations welcome
✓ Security consulting & advisory📬 Reach me at njerumtwaiti@proton.me or connect on LinkedIn.