I am a passionate Junior DevSecOps Engineer with a solid foundation in software development, cybersecurity, and automation. I am currently pursuing CIS Benchmarks Configuration Certification in Cyber Security and a Higher National Diploma in Software Development. With hands-on experience in web development, CI/CD pipelines, and security best practices, I enjoy integrating security into DevOps workflows using tools like Docker, Jenkins, and SAST/DAST scanners. My goal is to apply my technical skills in infrastructure-as-code (IaC), cloud security, and threat modeling to build secure, scalable systems. I'm enthusiastic about continuous learning and collaboration to improve security posture and development efficiency in dynamic environments.

Chimdiuto Uchegbue

I am a passionate Junior DevSecOps Engineer with a solid foundation in software development, cybersecurity, and automation. I am currently pursuing CIS Benchmarks Configuration Certification in Cyber Security and a Higher National Diploma in Software Development. With hands-on experience in web development, CI/CD pipelines, and security best practices, I enjoy integrating security into DevOps workflows using tools like Docker, Jenkins, and SAST/DAST scanners. My goal is to apply my technical skills in infrastructure-as-code (IaC), cloud security, and threat modeling to build secure, scalable systems. I'm enthusiastic about continuous learning and collaboration to improve security posture and development efficiency in dynamic environments.

Available to hire

I am a passionate Junior DevSecOps Engineer with a solid foundation in software development, cybersecurity, and automation. I am currently pursuing CIS Benchmarks Configuration Certification in Cyber Security and a Higher National Diploma in Software Development. With hands-on experience in web development, CI/CD pipelines, and security best practices, I enjoy integrating security into DevOps workflows using tools like Docker, Jenkins, and SAST/DAST scanners.

My goal is to apply my technical skills in infrastructure-as-code (IaC), cloud security, and threat modeling to build secure, scalable systems. I’m enthusiastic about continuous learning and collaboration to improve security posture and development efficiency in dynamic environments.

See more

Experience Level

Expert
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate

Work Experience

Freelance Shopify DevOps at Freelance
February 1, 2024 - Present
Implemented and maintained automated security checks in CI/CD pipelines such as GitHub Actions and Jenkins. Integrated SAST/DAST tools like SonarQube, OWASP ZAP, and Snyk to scan code and dependencies. Enforced Infrastructure-as-Code (IaC) security with tools like Checkov or Terrascan for Terraform. Identified, prioritized, and remediated vulnerabilities including CVEs in code, containers, and cloud environments. Triaged security tool findings and collaborated with developers for fixes. Monitored threat feeds for emerging risks and implemented security headers and CSP policies to mitigate XSS attacks on e-commerce platforms.
DevSecOps Intern at Blocverse
January 31, 2024 - August 26, 2025
Hardened Kubernetes and Docker deployments using CIS benchmarks and network policies. Configured cloud security controls including AWS IAM policies and Azure Security Center. Automated secrets management with HashiCorp Vault and AWS Secrets Manager. Assisted in audits such as SOC 2, ISO 27001 by documenting security controls. Implemented policy-as-code using Open Policy Agent to enforce compliance rules. Collaborated on back-end API development with Python/Flask integrating security checks to prevent SQL injection. Assisted in containerizing applications with Docker and setting up basic CI/CD workflows.
Junior DevOps Research Intern at Globachain
January 31, 2022 - August 26, 2025
Participated in threat modeling sessions for new features and applications using frameworks like STRIDE. Mapped data flows and identified attack surfaces. Set up SIEM tools such as Wazuh and Splunk for real-time security alerts. Responded to security incidents through log analysis and mitigation steps. Assisted in building and maintaining CI/CD pipelines using Jenkins and GitHub Actions for research projects. Automated deployment of research environments with IaC tools like Terraform and Ansible. Containerized applications and services using Docker and Kubernetes for reproducible testing.

Education

Higher National Diploma at National Institute of Information and Technology
June 1, 2023 - August 1, 2024
HND Cyber Security at ISC²
January 1, 2026 - August 26, 2025

Qualifications

AWS Certified Cloud Practitioner
January 11, 2030 - August 26, 2025
Microsoft SC-900 (Security Fundamentals)
January 11, 2030 - August 26, 2025

Industry Experience

Software & Internet, Professional Services, Retail

Experience Level

Expert
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate