Azeez Temitayo

Application Security Analyst with 2.5 years of dedicated experience assessing a production financial-services platform, supported by broader web application security and PHP development experience. Hands-on across web and API security testing, authentication, session security, authorisation/IDOR, injection, CSRF, SSRF, XXE and business-logic testing. Experienced in Burp Suite, OWASP ZAP, Tenable Nessus and Postman, secure PHP code review, vulnerability validation, remediation coordination and security retesting through closure.

Strong understanding of OWASP Top 10 and OWASP ASVS, secure sessions, least privilege, rate limiting, secure file handling, WAF/Zero Trust controls and evidence-based security reporting. CompTIA CySA+ and Security+ certified.

Application Security Analyst / Web Application Security Engineer - EverTrust Finance Ltd - Nigeria (Remote)

(2023-08 - 2026-02)

• Performed security assessments of a production financial-services platform across web, API, authentication, authorisation, session management, business logic and server configuration.
• Identified, validated and prioritised vulnerabilities; documented evidence, root cause and risk; coordinated remediation with technical teams; and retested fixes through verified closure.
• Used Tenable Nessus, Burp Suite, OWASP ZAP and complementary tooling to review vulnerability findings, validate scanner results and support remediation follow-up.
• Reviewed security-sensitive PHP code and application flows and supported controls including MFA/2FA, rate limiting, CSRF protection, secure file handling and least-privilege access.
• Supported SIEM/security monitoring and investigation of authentication failures, access-control events, phishing-related security concerns and suspicious application behaviour, gathering evidence and escalating security incidents where appropriate.
• Supported secure configuration and hardening across Linux/server and Windows identity environments, including Active Directory and Group Policy, alongside firewall/WAF controls, Cloudflare Zero Trust and secure deployment practices.
• Used Python for security/testing scripts and automation tasks supporting validation and technical delivery.
• Applied security and governance principles aligned with ISO/IEC 27001, NIST CSF, OWASP ASVS, UK GDPR / Data Protection Act 2018 and CIS Benchmarks.

User Acceptance Testing (UAT) Analyst - Contract - Morgan Stanley - Austin, USA

(2026-02 - 2026-08)

• Reviewed business and functional requirements and converted expected behaviour into UAT test scenarios, test cases and acceptance criteria.
• Prepared realistic test data and executed positive, negative, end-to-end, functional and regression testing across business workflows.
• Used Postman for API testing and captured evidence including screenshots, HTTP responses, transaction references and expected-versus-actual results.
• Logged, prioritised and tracked technical defects in Jira and Azure DevOps, maintaining clear evidence, status information and follow-up through resolution.
• Worked with developers, product owners and business stakeholders to communicate technical issues, coordinate fixes, retest resolutions and track actions through closure.
• Produced status and completion evidence to support operational reporting, risk-based decisions and formal sign-off.

Freelance Web Application Security & PHP Developer - Self-Employed / Agency Engagements - Remote

(2019-01)

• Develop, test, deploy and maintain PHP/MySQL applications on Linux/Apache environments, including APIs, payment gateways and security-sensitive workflows.
• Perform vulnerability assessment, functional/security validation, secure code review, remediation support and security retesting.
• Produce clear technical documentation for developers and non-technical stakeholders and apply secure sessions, input validation, safe logging, least privilege and WAF/firewall controls.

MSc - Management - Olabisi Onabanjo University (2013-01 - 2016-01)

BSc - Management - Olabisi Onabanjo University (2009-01 - 2013-01)