Geoffrey Lawrence

Cybersecurity professional with hands-on experience in vulnerability assessment and penetration testing (VAPT), internal and external network assessments, web application security testing, and security operations. Experienced in reconnaissance, enumeration, vulnerability identification, controlled exploitation, evidence collection, technical reporting, and communicating remediation recommendations to customers and technical stakeholders. Familiar with web application and API security testing principles, including authentication, authorisation, access control, session management, input validation, and security misconfigurations.

Experienced with security assessment tools including Burp Suite, OWASP ZAP, Nmap, and Nessus. Strong foundation in network security, Windows and Linux environments, vulnerability analysis, risk-based prioritisation, and remediation validation.

Cybersecurity / IT Infrastructure Analyst at Boch Systems Limited (BSL) (2025-01 – Present)

• Conduct authorised vulnerability assessments and penetration testing across customer network infrastructure, internal environments, and web applications to identify security weaknesses and assess exposure.
• Perform reconnaissance, enumeration, service discovery, and vulnerability analysis to map attack surfaces and identify weaknesses in systems, services, and configurations.
• Test web applications for potential vulnerabilities involving authentication, authorisation, access control, session management, input validation, and security misconfigurations.
• Use Burp Suite and OWASP ZAP to inspect application requests and responses, investigate potential vulnerabilities, validate findings, and collect technical evidence.
• Assess application and API security where included in the engagement scope, examining endpoint behaviour, access controls, input handling, and potential security weaknesses.
• Conduct internal and external network assessments, identifying exposed services, insecure configurations, legacy protocols, SMB weaknesses, and gaps in network security controls.
• Validate vulnerabilities through controlled testing and assess their potential impact to support severity classification and risk-based remediation prioritisation.
• Prepare structured VAPT reports documenting affected assets, technical evidence, vulnerability severity, security impact, and practical remediation recommendations for customer review.
• Present VAPT findings to customers and technical stakeholders, explain exploitation scenarios and remediation requirements, and support discussions on corrective actions.
• Support remediation activities by clarifying technical findings, recommending corrective measures, documenting outstanding issues, and conducting follow-up validation where applicable.
• Monitor security dashboards, investigate alerts, analyse logs, document security events, and escalate significant findings as part of SOC operations.
• Support the deployment, integration, upgrade, and troubleshooting of enterprise cybersecurity solutions, coordinating technical activities with customers, vendors, and internal teams.

Cybersecurity Training & Practical Development at NetworkWalks (2026 – Present)

• Participate in ongoing cybersecurity learning and practical development to strengthen technical knowledge and build capabilities relevant to security assessment and defensive operations.

Bachelor’s Degree – University of Ilorin (2019 – 2024)