Zwanga Mafune

Final-year BSc Computer Science student with a hands-on record in authorised penetration testing and a natural instinct for spotting where systems, processes and people break down. Comfortable across the full attack surface — from web application logic flaws to the code that produces them — through concurrent experience as a cybersecurity intern and full-stack developer. Methodical under OWASP-aligned testing, clear in translating technical risk to non-technical stakeholders, and driven to build a career as a working penetration tester.

Cybersecurity Intern - MWR CyberSec - Remote

(2026-03 - 2026-07)

• Conducted authorised penetration testing across client web applications, identifying and documenting vulnerabilities including XSS, CSRF, SQL injection and file upload flaws
• Completed a 16-week Web Application Security programme and capstone penetration test against a live internal web application, using Burp Suite Community Edition to perform JWT decoding, IDOR testing, HTML injection and mass assignment exploitation, confirming an exploitable vulnerability flag
• Applied OWASP Top 10 methodology to structure assessments and prioritise findings by real-world risk
• Produced formal penetration test reports for both technical and non-technical stakeholders, translating exploit chains into business-level risk

IT Work Integrated Learning - MICT SETA / University of Venda

(2026-04 - 2026-09)

• Developing a full-stack web application with a database for the University, covering both frontend and backend implementation
• Gained structured exposure to IT operations, workplace practice and stakeholder communication — reinforcing an understanding of how applications are built, which sharpens the ability to spot how they can be broken

BSc - Computer Science - University of Venda (2023-01 - 2026-12)