Umanhonlen Gabriel

My professional journey began in the banking sector, where I worked with one of Nigeria's recognized banks as a Fraud Risk Supervisor. In this role, I led a team of 15 professionals responsible for monitoring, investigating, and responding to potentially fraudulent transactions. This experience gave me a strong foundation in fraud detection, risk management, incident handling, operational controls, and team leadership, while also providing valuable insight into the security challenges faced by financial institutions.

I later progressed into application security as a Senior Application Security Engineer, where I worked across different stages of the application lifecycle, including security testing, pilot stages, and production deployment. I worked closely with developers and technology teams to identify and remediate security vulnerabilities, integrate security into development processes, and strengthen application security controls. My responsibilities also included managing and securing API services, conducting security assessments, supporting remediation efforts, and providing security guidance to development and engineering teams.

My experience extends beyond technical security into Governance, Risk, and Compliance (GRC). I have contributed to security risk assessments, control implementation, compliance requirements, security governance, and the alignment of technical security practices with organizational risk objectives. I understand the importance of connecting technical security findings with business risk and ensuring that security decisions support broader organizational objectives.

I have also worked closely with the Chief Information Security Officer (CISO) and senior management on cybersecurity resilience initiatives. This has included preparing and delivering presentations on cybersecurity resilience, security risks, emerging threats, and organizational security priorities. I believe effective cybersecurity requires more than identifying vulnerabilities. It requires communicating risk clearly to decision makers and helping organizations make informed decisions that strengthen their overall security posture and resilience.

In my current capacity as an independent security researcher, I continue to work with organizations of different sizes, from startups to enterprise platforms, across penetration testing, security research, code review, vulnerability management, and Al governance and responsible disclosure. I approach security from an adversarial perspective, looking beyond what automated scanners can identify. I focus on discovering vulnerabilities that require deeper analysis, demonstrating their practical impact through working exploits where appropriate, and working with organizations to achieve effective and lasting remediation.

With more than 70 security audits completed and a 98% client success rate, my work is measured by tangible outcomes: vulnerabilities identified, responsibly disclosed, remediated, and verified. Beyond individual engagements, I collaborate with security triage teams through responsible disclosure programs, communicating findings clearly, contributing to severity and impact assessments, and supporting the validation and remediation process. I believe a security report is only as valuable as the improvement it drives.

My security research has been published in peer-reviewed journals and national press, and my findings have been recognized on public Hall of Fame lists maintained by organizations including Microsoft, Zetes, GBTwente, SweetHawk, and others. These recognitions reflect my commitment to responsible security research and to helping organizations identify and address vulnerabilities before they can be exploited by malicious actors.

Beyond my professional work and research, I actively contribute to cybersecurity forums and communities through knowledge sharing, technical discussions, research, mentorship, and collaboration. I also manage and lead Cyber Odyssey, a cybersecurity community focused on bringing security professionals, researchers, students, and aspiring practitioners together to learn, collaborate, and grow.

Through Cyber Odyssey, I facilitate discussions, share practical security knowledge and resources, encourage research and knowledge exchange, and create opportunities for members to develop their technical and professional skills. I am particularly passionate about helping aspiring cybersecurity professionals gain practical experience and access to knowledge that can help them progress in the field.

I also mentor the next generation of cybersecurity talent through free training, hands-on labs, practical guidance, and community initiatives. I believe cybersecurity becomes stronger when knowledge is shared, experienced professionals support emerging talent, and organizations and individuals work together to build a more resilient digital ecosystem.