Oladipupo Olufowobi

Information Security Systems Lead Auditor @British Assessment Bureau

Kent, GB

Work with software development teams to review and implement security measures on Kubernetes clusters, like authenticating users and service accounts into clusters, RBAC (Role-Based Access Control) for fine-grained authorisation to cluster resources (using a combination of Role and Role Binding) using OICD tools like Okta, AWS IAM-Review and implementing Network policies (Ingress and Egress) to control and segregate pod/deployment access; Security of credentials and secret information using Kubernetes configMaps and Secrets resources, AWS Secret Manager, and Vault systems, and other best practices recommended by various Cloud Service Providers (AWS, Azure, GCP) as well as security frameworks (NIST, CIS, ISO27001)-Implement and recommend a defence in-depth strategy to identify vulnerabilities across all systems starting from the developmental CI stage by using tools like Sonarqube for both SAST scanning of the code base, DAST scanning in the production environment, and SCA to identify vulnerabilities, bugs, code duplicates, and code smells. Other solutions implemented include Tenable and Qualys-Reviewed, recommended, configured and implemented SAST (static application security testing) tools (such as NJSscan, GitLeak, Aikido, Qualys, SonarQube) to CI pipeline on GitHub Action and Jenkins, and configured automatic scan report uploads to the centralised vulnerability management systems (Such as DefaultDojo, Aikido, etc).

Ladoke Akintola University of Technology

Bachelor of Technology (B.Tech.). Second Class Upper