Nsuku Minyuku

Security-focused software professional with experience across enterprise application support, full-stack development, and web application security testing. Hands-on experience identifying, exploiting, and documenting vulnerabilities across authentication and authorization, SQL Injection, Cross-Site Scripting (XSS), insecure file uploads, JWT implementation, session management, and business logic. Completed the MWR CyberSec Virtual Internship Capstone and was subsequently selected for the MWR CyberSec in-person internship, where I conducted security assessments using an industry-oriented approach, working from Statements of Work, producing professional security reports, and presenting findings and remediation recommendations to clients.

Experienced in manual and automated security testing using Burp Suite, Nmap, Kali Linux, SQLmap, Hashcat, and Metasploit, with a focus on understanding root cause, business impact, and remediation. Currently completing a BCom Honours in Information Systems (Cybersecurity) at the University of Cape Town, building on a BSc in Computer Science and three years of enterprise application experience at FNB. Seeking an entry-level or associate Application Security / Product Security role where I can contribute immediately while continuing to deepen my expertise in secure software development, security testing, and DevSecOps.

Application Security - Kuvonakala InsightTech (Pty) Ltd

(2026-04)

• Contribute to the development of a marketplace application with a focus on REST API testing, security validation, requirements refinement, and secure development practices.
• Test Spring Boot REST APIs, validating authentication, authorization, access controls, input handling, error handling, business logic, and expected application behaviour.
• Conduct security-focused API testing to identify weaknesses in authentication, authorization, input validation, access control, and business logic.
• Work with developers and stakeholders to refine functional and security requirements and identify security considerations early in the development lifecycle.
• Review proposed functionality and API behaviour from both functional and security perspectives, communicating identified risks and recommended controls to the development team.

Web Application Penetration Tester (Internship) - MWR

(2026-03 - 2026-06)

• Selected for and subsequently completed the MWR CyberSec in-person internship, applying penetration-testing methodologies within an industry-oriented environment.
• Worked from Statements of Work (SOWs) to understand assessment scope, objectives, testing requirements, and expected deliverables.
• Conducted manual and automated web application security testing, covering authentication and authorization, SQL Injection, XSS, insecure file uploads, JWT implementation, session management, insecure transport, and business logic.
• Exploited vulnerabilities to demonstrate practical impact, including SQL Injection, Remote Code Execution through unrestricted file upload, and JWT token forgery.
• Produced professional penetration-testing reports containing reproduction steps, evidence, severity, business impact, and remediation recommendations.
• Presented security findings, technical impact, and remediation recommendations to clients and stakeholders.
• Collaborated with security practitioners throughout assessments, incorporating feedback to improve testing methodology and reporting quality.
• Completed a structured penetration test against a simulated recruitment platform, identifying and documenting 12 security findings ranging from Informational to High severity.

Application Support Analyst - FNB (Joburg) - Joburg

(2023-02 - 2026-04)

• Supported enterprise Microsoft Dynamics CRM and Dynamics 365 applications, troubleshooting authentication, authorization, security roles, integrations, application defects, and production incidents.
• Investigated application and access-control issues through structured troubleshooting and root-cause analysis, working across application configuration, workflows, plugins, integrations, and data.
• Coordinated application deployments across DEV, TEST, UAT, and PROD, including configuration migration, release validation, smoke testing, regression testing, and post-deployment verification.
• Worked closely with developers, QA, infrastructure, and business stakeholders to investigate defects, assess application changes, and resolve production issues within SLA.
• Supported production change management and release processes, contributing to application stability, security configuration, and operational readiness.
• Monitored application integrations, background processes, and interfaces to identify failures and determine appropriate remediation.

Full Stack Developer - Storage Sprint - Remote

(2024-07 - 2025-12)

• Designed and developed a logistics platform using React.js and Django, gaining hands-on experience across frontend, backend, API, database, and application architecture.
• Designed and integrated RESTful APIs, including request/response handling, authentication flows, data validation, and application-level business logic.
• Participated in code reviews, unit testing, debugging, and defect resolution to improve application reliability and maintainability.
• Collaborated with business stakeholders to translate requirements into user stories and technical solutions.
• Worked within an Agile/Scrum development environment alongside developers and other technical stakeholders.
• Used Git for version control and collaborative software development.

BCom Honours - Information Systems in Cybersecurity - University of Cape Town (2026-02)

BSc - Computer Science & Computer - University of Cape Town (2020-02 - 2023-01)

Grade 12 - Manghezi Secondary (2019-01 - 2019-11)