Looks like you have JavaScript disabled. For the full Twine experience, you will need to re-enable it.

Cybersecurity & Backend Developer | Secure Systems, Built Right I specialize in secure backend development and application security — the kind of work where "it works" isn't enough; it has to hold up under attack. My flagship project, K-ALMIS, is a backend system I built for managing public assets and liabilities during a government IT attachment. It's not a toy app — it runs on enterprise-grade security: multi-factor authentication, device fingerprinting, JWT session management, bcrypt hashing, IP reputation checks, and role/attribute-based access control (RBAC/ABAC). Beyond client work, I actively hunt vulnerabilities on HackerOne and compete at a national level — most recently winning three categories at the 2025 Inter-University AI Hackathon. What I can help you with: Secure backend systems and APIs Authentication & access control (MFA, JWT, RBAC/ABAC) Security audits, hardening, and vulnerability assessment General software development with security baked in from day one If you need something built that also needs to be defensible, let's talk.…Cybersecurity & Backend Developer | Secure Systems, Built Right I specialize in secure backend development and application security — the kind of work where "it works" isn't enough; it has to hold up under attack. My flagship project, K-ALMIS, is a backend system I built for managing public assets and liabilities during a government IT attachment. It's not a toy app — it runs on enterprise-grade security: multi-factor authentication, device fingerprinting, JWT session management, bcrypt hashing, IP reputation checks, and role/attribute-based access control (RBAC/ABAC). Beyond client work, I actively hunt vulnerabilities on HackerOne and compete at a national level — most recently winning three categories at the 2025 Inter-University AI Hackathon. What I can help you with: Secure backend systems and APIs Authentication & access control (MFA, JWT, RBAC/ABAC) Security audits, hardening, and vulnerability assessment General software development with security baked in from day one If you need something built that also needs to be defensible, let's talk.

Emmanuel Musau

Back-End Developer, Full Stack Developer, Web Developer, +2





Cybersecurity & Backend Developer | Secure Systems, Built Right I specialize in secure backend development and application security — the kind of work where "it works" isn't enough; it has to hold up under attack. My flagship project, K-ALMIS, is a backend system I built for managing public assets and liabilities during a government IT attachment. It's not a toy app — it runs on enterprise-grade security: multi-factor authentication, device fingerprinting, JWT session management, bcrypt hashing, IP reputation checks, and role/attribute-based access control (RBAC/ABAC). Beyond client work, I actively hunt vulnerabilities on HackerOne and compete at a national level — most recently winning three categories at the 2025 Inter-University AI Hackathon. What I can help you with: Secure backend systems and APIs Authentication & access control (MFA, JWT, RBAC/ABAC) Security audits, hardening, and vulnerability assessment General software development with security baked in from day one If you need something built that also needs to be defensible, let's talk.…Cybersecurity & Backend Developer | Secure Systems, Built Right I specialize in secure backend development and application security — the kind of work where "it works" isn't enough; it has to hold up under attack. My flagship project, K-ALMIS, is a backend system I built for managing public assets and liabilities during a government IT attachment. It's not a toy app — it runs on enterprise-grade security: multi-factor authentication, device fingerprinting, JWT session management, bcrypt hashing, IP reputation checks, and role/attribute-based access control (RBAC/ABAC). Beyond client work, I actively hunt vulnerabilities on HackerOne and compete at a national level — most recently winning three categories at the 2025 Inter-University AI Hackathon. What I can help you with: Secure backend systems and APIs Authentication & access control (MFA, JWT, RBAC/ABAC) Security audits, hardening, and vulnerability assessment General software development with security baked in from day one If you need something built that also needs to be defensible, let's talk.

Available to hire

Cybersecurity & Backend Developer | Secure Systems, Built Right
I specialize in secure backend development and application security — the kind of work where “it works” isn’t enough; it has to hold up under attack.
My flagship project, K-ALMIS, is a backend system I built for managing public assets and liabilities during a government IT attachment. It’s not a toy app — it runs on enterprise-grade security: multi-factor authentication, device fingerprinting, JWT session management, bcrypt hashing, IP reputation checks, and role/attribute-based access control (RBAC/ABAC).
Beyond client work, I actively hunt vulnerabilities on HackerOne and compete at a national level — most recently winning three categories at the 2025 Inter-University AI Hackathon.
What I can help you with:

Secure backend systems and APIs
Authentication & access control (MFA, JWT, RBAC/ABAC)
Security audits, hardening, and vulnerability assessment
General software development with security baked in from day one

If you need something built that also needs to be defensible, let’s talk.

Skills

Experience Level

Expert

Expert

Expert

Expert

Expert

Expert

Intermediate

Language

English

Fluent

Swahili

Fluent

Work Experience

Backend Developer at K-ALMIS (Kenya Asset & Liability Management Information System) - Murang’a County Government

May 1, 2025 - August 31, 2025

Led the backend development of K-ALMIS, a secure and scalable FastAPI-based system to manage government assets and liabilities, compliant with the Public Finance Management Act 2012 and IP SAS standards. Implemented enterprise-grade security architecture including MFA, device fingerprinting, JWT session management, bcrypt password hashing, IP reputation checks, and rate limiting. Enforced RBAC/ABAC access policies, comprehensive audit logging, and automated security reporting. Supported deployment on Linux servers with integration of third-party services (SMTP, Cloud storage, geocoding APIs). Provided tier-1 and tier-2 IT support and performed secure data migration and network device configuration.

Bug Bounty Hunter at HackerOne Platform

August 1, 2024 - Present

Identified and responsibly disclosed security vulnerabilities in web applications, including authentication bypass, XSS, API misconfigurations, and CSRF flaws. Continuously refined exploit chaining, API security testing, and bypassing modern security controls to protect financial systems and customer data.

Freelance IT Technician & Hardware Repair Specialist at Self-Employed

May 1, 2022 - Present

Diagnose and repair mobile phones, laptops, TVs, and audio equipment—hardware faults, screen replacements, battery replacements, and soldering. Perform software-related repairs including OS installations, firmware recovery, boot error resolution, and malware removal. Install and configure Wi‑Fi networks for clients and provide technical support to students and colleagues.