---

whoami

$ cat profile.txt

Offensive Security Engineer and Penetration Tester based in Nairobi, Kenya.
Expertise in bug bounty research, vulnerability & malware research, and red team operations.
I find the gaps before attackers do — then help organizations close them for good.

---

🔭 Currently

• 🔴 Red teaming payment & authentication platforms at Durrafx
• 🐛 Hunting bugs across web, API, and mobile targets on HackerOne
• 🔐 SOC operations & log analysis at Foresight Tech Group
• 📖 Deepening expertise in mobile app security and malware analysis

---

🛠 Skills & Tools

Offensive
Penetration Testing Red Teaming Bug Bounty Vulnerability Research Malware Analysis Social Engineering

Domains
Web Security API Security Mobile Security Network Security Financial Systems

Frameworks & Standards
OWASP PTES PCI-DSS MITRE ATT&CK

Languages & Tools
Python Go Bash Burp Suite Docker Metasploit Wireshark Nmap SIEM

Defensive
Log Analysis Incident Response Threat Modeling IDS/IPS Secure Code Review

---

📊 GitHub Stats

---

📌 Featured Projects

Project	Description	Stack
ARP	ARP spoofing tool — intercepts DNS traffic and exfiltrates to a remote server	Python, Scapy
PhoneBook-Vault	All possible Kenyan phone number combinations for OSINT/recon use	Data
Note-Weave	Minimal, elegant note-taking app	JavaScript

🖊️ Writeups & disclosures coming soon — follow to stay updated.

---

🤝 Let's Work Together

$ cat availability.txt

✓ Open to penetration testing engagements
✓ Available for red team operations  
✓ Bug bounty collaborations welcome
✓ Security consulting & advisory

📬 Reach me at njerumtwaiti@proton.me or connect on LinkedIn.

---

"unlocking the undetectable."