Emmanuel Musau
Cybersecurity & Backend Developer | Secure Systems, Built Right I specialize in secure backend development and application security — the kind of work where "it works" isn't enough; it has to hold up under attack.
About
Cybersecurity & Backend Developer | Secure Systems, Built Right
I specialize in secure backend development and application security — the kind of work where “it works” isn’t enough; it has to hold up under attack.
My flagship project, K-ALMIS, is a backend system I built for managing public assets and liabilities during a government IT attachment. It’s not a toy app — it runs on enterprise-grade security: multi-factor authentication, device fingerprinting, JWT session management, bcrypt hashing, IP reputation checks, and role/attribute-based access control (RBAC/ABAC).
Beyond client work, I actively hunt vulnerabilities on HackerOne and compete at a national level — most recently winning three categories at the 2025 Inter-University AI Hackathon.
What I can help you with:
Secure backend systems and APIs
Authentication & access control (MFA, JWT, RBAC/ABAC)
Security audits, hardening, and vulnerability assessment
General software development with security baked in from day one
If you need something built that also needs to be defensible, let’s talk.
- 4 years' experience
- Joined July 2026
Languages
- EnglishFluent
- SwahiliFluent
Industry experience
- Government
- Professional Services
- Software & Internet
- Education
- Media & Entertainment
Work experience
Led the backend development of K-ALMIS, a secure and scalable FastAPI-based system to manage government assets and liabilities, compliant with the Public Finance Management Act 2012 and IP SAS standards. Implemented enterprise-grade security architecture including MFA, device fingerprinting, JWT session management, bcrypt password hashing, IP reputation checks, and rate limiting. Enforced RBAC/ABAC access policies, comprehensive audit logging, and automated security reporting. Supported deployment on Linux servers with integration of third-party services (SMTP, Cloud storage, geocoding APIs). Provided tier-1 and tier-2 IT support and performed secure data migration and network device configuration.
Identified and responsibly disclosed security vulnerabilities in web applications, including authentication bypass, XSS, API misconfigurations, and CSRF flaws. Continuously refined exploit chaining, API security testing, and bypassing modern security controls to protect financial systems and customer data.
Diagnose and repair mobile phones, laptops, TVs, and audio equipment—hardware faults, screen replacements, battery replacements, and soldering. Perform software-related repairs including OS installations, firmware recovery, boot error resolution, and malware removal. Install and configure Wi‑Fi networks for clients and provide technical support to students and colleagues.
Education
Certifications and awards· 6
Hire Emmanuel Musau today
Post a job and invite Emmanuel, or contact them directly. No hidden commission.