Security Evidence Graph
No single piece of evidence sits in only one lane. This page shows where application security, AI/LLM security, AI governance, and software engineering actually connect -- through the same projects, roles, and research, not through separate, siloed portfolios.
Claims → Evidence
A handful of specific things a reader might ask about, walked through the real evidence that backs each one, in order.
SAST
- 1.Professional ExperienceApplication Security Analyst — wHTa Networks
Professional AppSec experience — SAST/DAST assessment (XSS, CSRF, injection flaws) as a paid, current responsibility.
Prompt Injection
- 1.ResearchRisk-Triggered Adaptive Moving Target Defense for Secure LLM Systems
Research (completed) — 216 tests across 72 attacks (Promptfoo, NVIDIA garak, Microsoft PyRIT) drove attack success rate from 38.9% baseline to 2.8% under AMTD.
- 2.Academic ProjectCIS*6510: Data Leakage Attacks & Defense-in-Depth in LLM-Enabled Web Applications
Academic project (CIS*6510) — the layered defense architecture (context isolation, sanitization, redaction) prompt-injection defenses rely on; both attack classes blocked under the full three-layer defense.
- 3.Personal ProjectLLM Data Leakage Lab
Personal project — the same architecture measured end-to-end: a 25% baseline disclosure rate driven to 0% under defense-in-depth.
- 4.Specialized TrainingCertifications & Specialized Training
Specialized training — AI/ML security risk and responsible-AI coursework underpinning the governance read of this same risk.
IAM
- 1.Professional ExperienceInformation Security & System Analyst — Zionshine ICT Hub (IAM • Application Security • GRC)
Professional systems experience — IAM provisioning under least-privilege controls across 4,000+ accounts.
- 2.Professional ExperienceVerification Specialist — Bill Gosling Outsourcing
Verification / fraud experience — identity-document verification and fraud escalation, adjacent to IAM's trust decisions.
Digital Forensics
- 1.Academic LabLighthouse Labs Cybersecurity Program — Applied Projects
Academic lab — disk-investigation forensics using EnCase and Autopsy.
- 2.Academic ProjectAI-Generated Voice / Deepfake Fraud Evidence Triage
Academic project — the same MSc course's disk-image (.dd/MBR) and network forensics (Wireshark) methodology grounding a deepfake-evidence triage capstone.
Software Engineering
- 1.Personal ProjectFull-Stack Development Projects
Development education — full-stack coursework and personal projects (React, Django, Firebase, OAuth 2.0, ASP.NET Core, Angular, MEAN).
- 2.Commercial ProductQuickHalo
Independent commercial product — the same full-stack skill set applied to a real, multi-surface SaaS product for service businesses, with dedicated product-security work.
- 3.Product in DevelopmentIgboNest
Independent product in development — a mobile-first Expo/React Native application with secure-by-design authentication and profile separation.
Independent / Freelance Security & Development Work
- 1.Independent / FreelanceIndependent Client Development & Pre-Deployment Security Reviews
Independent client delivery and pre-deployment security reviews for people in her network, outside of any employer or academic program.
- 2.Commercial ProductQuickHalo
The same independent identity, applied to owning and building a commercial product end-to-end, including its own security review.
Cross-lane evidence
Evidence records that connect more than one domain or more than one target role -- the strongest signal of how the three lanes relate, rather than three unrelated resumes.
QuickHalo
LLM Data Leakage Lab
Certifications & Specialized Training
Frameworks: NIST CSF, MITRE ATT&CK, OWASP Top 10 -- see Framework & Regulatory Knowledge.
AI-Generated Voice / Deepfake Fraud Evidence Triage
Verification Specialist — Bill Gosling Outsourcing
Application Security Analyst — wHTa Networks
Frameworks: OWASP Top 10, CWE/SANS Top 25 -- see Framework & Regulatory Knowledge.
Information Security & System Analyst — Zionshine ICT Hub (IAM • Application Security • GRC)
Early-Career IT & Security Operations (Nigeria, 2015–2020)
Lighthouse Labs Cybersecurity Program — Applied Projects
Independent Client Development & Pre-Deployment Security Reviews
Evidence by domain
Every domain below is a live count from the same evidence records shown throughout the site -- a domain with zero verified evidence is omitted rather than shown as an empty claim.
Application Security (10 evidence records)
- LLM Data Leakage Lab
- Application Security Analyst — wHTa Networks
- Penetration Testing — wHTa Networks
- Information Security & System Analyst — Zionshine ICT Hub (IAM • Application Security • GRC)
- Early-Career IT & Security Operations (Nigeria, 2015–2020)
- Certifications & Specialized Training
- Penetration Testing and Exploit Development Lab Series
- Lighthouse Labs Cybersecurity Program — Applied Projects
- Independent Client Development & Pre-Deployment Security Reviews
- QuickHalo
AI / LLM Security (4 evidence records)
AI Governance (3 evidence records)
- Verification Specialist — Bill Gosling Outsourcing
- Certifications & Specialized Training
- AI Governance / Audit SaaS
Identity (2 evidence records)
- Verification Specialist — Bill Gosling Outsourcing
- Information Security & System Analyst — Zionshine ICT Hub (IAM • Application Security • GRC)
Forensics (2 evidence records)
- AI-Generated Voice / Deepfake Fraud Evidence Triage
- Lighthouse Labs Cybersecurity Program — Applied Projects
Threat Intelligence (1 evidence record)
Software Engineering (7 evidence records)
- LLM Data Leakage Lab
- Application Security Analyst — wHTa Networks
- Early-Career IT & Security Operations (Nigeria, 2015–2020)
- Full-Stack Development Projects
- Independent Client Development & Pre-Deployment Security Reviews
- QuickHalo
- IgboNest
Product (3 evidence records)
- QuickHalo
- IgboNest
- AI Governance / Audit SaaS
Evidence by target role
Application Security
14 evidence records (5 professional)
AI / LLM Security
6 evidence records (0 professional)
AI Governance, Risk & Responsible AI
5 evidence records (1 professional)
See also Framework & Regulatory Knowledge for the framework dimension of this same evidence, and the Attack → Defend → Govern Lab for one cross-lane thread walked through in depth.