Skip to content

Security Evidence Graph

No single piece of evidence sits in only one lane. This page shows where application security, AI/LLM security, AI governance, and software engineering actually connect -- through the same projects, roles, and research, not through separate, siloed portfolios.

Claims → Evidence

A handful of specific things a reader might ask about, walked through the real evidence that backs each one, in order.

SAST

  1. 1.
    Professional ExperienceApplication Security Analyst — wHTa Networks

    Professional AppSec experience — SAST/DAST assessment (XSS, CSRF, injection flaws) as a paid, current responsibility.

Prompt Injection

  1. 1.
    ResearchRisk-Triggered Adaptive Moving Target Defense for Secure LLM Systems

    Research (completed) — 216 tests across 72 attacks (Promptfoo, NVIDIA garak, Microsoft PyRIT) drove attack success rate from 38.9% baseline to 2.8% under AMTD.

  2. 2.
    Academic ProjectCIS*6510: Data Leakage Attacks & Defense-in-Depth in LLM-Enabled Web Applications

    Academic project (CIS*6510) — the layered defense architecture (context isolation, sanitization, redaction) prompt-injection defenses rely on; both attack classes blocked under the full three-layer defense.

  3. 3.
    Personal ProjectLLM Data Leakage Lab

    Personal project — the same architecture measured end-to-end: a 25% baseline disclosure rate driven to 0% under defense-in-depth.

  4. 4.
    Specialized TrainingCertifications & Specialized Training

    Specialized training — AI/ML security risk and responsible-AI coursework underpinning the governance read of this same risk.

IAM

  1. 1.
    Professional ExperienceInformation Security & System Analyst — Zionshine ICT Hub (IAM • Application Security • GRC)

    Professional systems experience — IAM provisioning under least-privilege controls across 4,000+ accounts.

  2. 2.
    Professional ExperienceVerification Specialist — Bill Gosling Outsourcing

    Verification / fraud experience — identity-document verification and fraud escalation, adjacent to IAM's trust decisions.

Digital Forensics

  1. 1.
    Academic LabLighthouse Labs Cybersecurity Program — Applied Projects

    Academic lab — disk-investigation forensics using EnCase and Autopsy.

  2. 2.
    Academic ProjectAI-Generated Voice / Deepfake Fraud Evidence Triage

    Academic project — the same MSc course's disk-image (.dd/MBR) and network forensics (Wireshark) methodology grounding a deepfake-evidence triage capstone.

Software Engineering

  1. 1.
    Personal ProjectFull-Stack Development Projects

    Development education — full-stack coursework and personal projects (React, Django, Firebase, OAuth 2.0, ASP.NET Core, Angular, MEAN).

  2. 2.
    Commercial ProductQuickHalo

    Independent commercial product — the same full-stack skill set applied to a real, multi-surface SaaS product for service businesses, with dedicated product-security work.

  3. 3.
    Product in DevelopmentIgboNest

    Independent product in development — a mobile-first Expo/React Native application with secure-by-design authentication and profile separation.

Independent / Freelance Security & Development Work

  1. 1.
    Independent / FreelanceIndependent Client Development & Pre-Deployment Security Reviews

    Independent client delivery and pre-deployment security reviews for people in her network, outside of any employer or academic program.

  2. 2.
    Commercial ProductQuickHalo

    The same independent identity, applied to owning and building a commercial product end-to-end, including its own security review.

Cross-lane evidence

Evidence records that connect more than one domain or more than one target role -- the strongest signal of how the three lanes relate, rather than three unrelated resumes.

LLM Data Leakage Lab

AI / LLM SecurityApplication SecuritySoftware Engineering

Certifications & Specialized Training

Application SecurityAI Governance

Frameworks: NIST CSF, MITRE ATT&CK, OWASP Top 10 -- see Framework & Regulatory Knowledge.

Verification Specialist — Bill Gosling Outsourcing

IdentityAI Governance

Application Security Analyst — wHTa Networks

Application SecuritySoftware Engineering

Frameworks: OWASP Top 10, CWE/SANS Top 25 -- see Framework & Regulatory Knowledge.

Information Security & System Analyst — Zionshine ICT Hub (IAM • Application Security • GRC)

IdentityApplication Security

Early-Career IT & Security Operations (Nigeria, 2015–2020)

Application SecuritySoftware Engineering

Lighthouse Labs Cybersecurity Program — Applied Projects

ForensicsApplication Security

IgboNest

ProductSoftware Engineering

AI Governance / Audit SaaS

ProductAI Governance

Evidence by domain

Every domain below is a live count from the same evidence records shown throughout the site -- a domain with zero verified evidence is omitted rather than shown as an empty claim.

Application Security (10 evidence records)

AI Governance (3 evidence records)

  • Verification Specialist — Bill Gosling Outsourcing
  • Certifications & Specialized Training
  • AI Governance / Audit SaaS

Identity (2 evidence records)

  • Verification Specialist — Bill Gosling Outsourcing
  • Information Security & System Analyst — Zionshine ICT Hub (IAM • Application Security • GRC)

Forensics (2 evidence records)

Product (3 evidence records)

Evidence by target role

Application Security

14 evidence records (5 professional)

AI / LLM Security

6 evidence records (0 professional)

AI Governance, Risk & Responsible AI

5 evidence records (1 professional)

See also Framework & Regulatory Knowledge for the framework dimension of this same evidence, and the Attack → Defend → Govern Lab for one cross-lane thread walked through in depth.