
Timothy Murkomen
Technology / Internet
Services offered
Cybersecurity Professional (DevSecOps) with a strong background in secure SDLC, application security assurance, secure coding practices, DevSecOps automation, and cloud security. Experienced in conducting security reviews, risk assessments, code audits, and SAST/DAST testing across agile development environments. Skilled in translating security requirements into actionable controls and embedding them into CI/CD pipelines, ensuring applications meet regulatory, compliance, and enterprise security standards before release to production. Passionate about strengthening software security posture, improving secure coding culture, and driving continuous security improvement across teams.
Experience
DevSecOps Engineer Nathan Digital [March 2025 - Date]
- Designed and maintained secure, scalable CI/CD pipelines, embedding security checks across build, test, and deployment stages.
- Integrated SAST/DAST and container security tools (SonarQube, OWASP ZAP, Burp Suite, Trivy, GitLeaks), reducing production vulnerabilities.
- Led secure coding initiatives and enforced OWASP best practices across engineering teams.
- Supported L2/L3 DevOps & security operations, improving incident resolution time and system stability.
- Collaborated closely with SOC teams to strengthen application and infrastructure security posture.
- Monitored platform health using Prometheus and Grafana, proactively identifying performance and security issues.
- Supported internal security audits and compliance activities in hybrid cloud environments.
DevSecOps Engineer Interintel Technologies Limited[Oct 2024 –Feb 2025]
- Built and secured CI/CD pipelines using Jenkins, GitHub, and Tekton for high-velocity software delivery.
- Deployed ModSecurity WAF, protecting applications against OWASP Top 10 threats.
- Designed and optimized Kafka-based event-driven systems for high-throughput environments.
- Led data reliability improvements, including Cassandra to PostgreSQL migration.
- Implemented continuous monitoring and alerting using Prometheus and Grafana.
DevSecOps & Cybersecurity Uamuzi Foundation [Jan 2024 –Aug 2024]
- Designed secure Infrastructure as Code (IaC) frameworks using Terraform, Helmfile, and Ansible.
- Implemented Kubernetes-based production platforms, ensuring resilience and scalability.
- Embedded security scanning and dependency checks (SonarQube, Veracode, Snyk, Trivy) into CI/CD pipelines.
- Enforced ISO 27001 and GDPR controls, supporting audits and risk assessments.
- Strengthened IAM, encryption, and endpoint protection strategies across cloud environments.
Security Software Engineer Robyns Business Systems [Nov 2020 – Dec 2023]
- Led secure delivery of enterprise systems, including Core Banking and E-Statements platforms.
- Architected and executed AWS and Azure cloud migrations with strong security baselines.
- Developed and deployed Dockerized microservices on Kubernetes, improving performance by 30%.
- Automated infrastructure provisioning using Terraform and Ansible, reducing deployment time by 50%.
- Implemented secure CI/CD pipelines using GitLab CI and Jenkins.
- Strengthened API security, encryption, OAuth 2.0, and JWT authentication mechanisms.
Education
- Master’s Degree in Information Technology Security and Audit, Jaramogi Oginga Odinga University of Science and Technology (JOOUST) – 2023- 2025.
- Bachelor’s Degree in Information Communication Technology, Jaramogi Oginga Odinga University of Science and Technology (JOOUST).
Professionals in the same Technology / Internet sector as Timothy Murkomen
Professionals from different sectors near Nairobi, Nairobi Area
Other users who are called Timothy
Jobs near Nairobi, Nairobi Area
-
Cyber Security Analyst DevSecOPS
3 days ago
Tezza Business Solutions Ltd NairobiThe role holder is responsible for ensuring information systems developed and deployed meet the Bank's set cybersecurity policies, standards, and requirements as well as complying to applicable cybersecurity regulations and industry standards. · Work with scrums and project teams ...
-
Security Professional
1 month ago
Amani Amanah Property & Security LTD NairobiThis is a full-time on-site role for a Security Professional located in Nairobi. The Security Professional will oversee and maintain the safety and security of physical premises, implement cybersecurity protocols, and ensure the security of information and network systems. · Cond ...
-
Security Analyst
1 month ago
Pi Consulting Services (PYCS) NairobiThe Security Analyst is responsible for keeping our systems, applications, and data secure. · ...