Blessing Ebenezer Akande

Application Security Engineer

Nigeria
On Talentta since Oct 2026

API Security✦Authentication & Authorization✦BOLA/IDOR✦CVSS V3.1✦DAST✦Data Flow Diagrams✦Input Validation✦OWASP ASVS✦OWASP Top 10✦Process Control✦SAST✦SCA✦SDLC✦Secure Code Review✦Settlement Management✦Source-to-Sink Analysis✦SQL/NoSQL Injection✦Threat Modelling (Stride)✦Vulnerability Identification & Assessment✦XSS✦AI‑assisted Security Analysis✦Burp Suite✦CodeQL✦Docker✦GitHub Actions CI/CD✦Gitleaks✦javascript✦Kali Linux✦Linux CLI✦OWASP ZAP✦REST APIs✦Semgrep✦Snyk✦Software Development✦SonarQube✦SQLMap✦API Security✦Authentication & Authorization✦BOLA/IDOR✦CVSS V3.1✦DAST✦Data Flow Diagrams✦Input Validation✦OWASP ASVS✦OWASP Top 10✦Process Control✦SAST✦SCA✦SDLC✦Secure Code Review✦Settlement Management✦Source-to-Sink Analysis✦SQL/NoSQL Injection✦Threat Modelling (Stride)✦Vulnerability Identification & Assessment✦XSS✦AI‑assisted Security Analysis✦Burp Suite✦CodeQL✦Docker✦GitHub Actions CI/CD✦Gitleaks✦javascript✦Kali Linux✦Linux CLI✦OWASP ZAP✦REST APIs✦Semgrep✦Snyk✦Software Development✦SonarQube✦SQLMap✦

At a glance

Blessing Ebenezer Akande (Application Security Engineer) is a professional based in Nigeria with a portfolio on Talentta. Blessing Ebenezer brings 6 years of professional experience, with strengths in API Security, Authentication & Authorization, BOLA/IDOR and CVSS V3.1. Blessing Ebenezer studied Certificate in Medical Laboratory Technology at College of Health Sciences and Technology, Ijero‑Ekiti.

6+
Years experience: 36+
Skills: 3+
Roles held

About

Meet Blessing Ebenezer

Application Security Engineer with hands‑on ownership of web application and REST API security across the Secure Software Development Lifecycle (SSDLC). Delivers secure source‑code review, source‑to‑sink analysis, threat modelling, SAST/SCA/DAST, API security testing, and manual penetration testing with full vulnerability validation and remediation verification. Currently securing a multi‑repository e‑commerce platform end‑to‑end, integrating automated security controls into CI/CD, performing dependency and secret scanning, and driving findings from detection through developer remediation. Strong practical depth in authentication and authorization testing (BOLA/IDOR), injection classes, XSS, session management, business‑logic flaws, and DevSecOps automation. Combines AI‑assisted analysis with rigorous independent validation.

Expertise

What I bring

Intermediate

API Security
Authentication & Authorization
BOLA/IDOR
CVSS V3.1
DAST
Data Flow Diagrams
Input Validation
OWASP ASVS
OWASP Top 10
Process Control
SAST
SCA
SDLC
Secure Code Review
Settlement Management
Source-to-Sink Analysis
SQL/NoSQL Injection
Threat Modelling (Stride)
Vulnerability Identification & Assessment
XSS

Foundational

AI‑assisted Security Analysis
Burp Suite
CodeQL
Docker
GitHub Actions CI/CD
Gitleaks
javascript
Kali Linux
Linux CLI
OWASP ZAP
REST APIs
Semgrep
Snyk
Software Development
SonarQube
SQLMap

Career

Experience

Jan 2020 —
Application Security Engineer
PhyhanAgro Marketplace Limited
Own application security for a multi‑repository e‑commerce platform, performing secure source‑code reviews, source‑to‑sink analysis, threat modelling, and automated security controls integration (Semgrep, CodeQL, Snyk, Gitleaks) into CI/CD. Operate multi‑channel analysis workflow, conduct SCA, run Gitleaks for secret detection, lead threat‑modelling exercises, execute targeted API and application testing (BOLA/IDOR, injection, authentication weaknesses, business‑logic flaws), validate findings, produce technical security reports, and verify remediation. Leverage AI‑assisted workflows for rapid code comprehension and documentation.
Jan 2020 —
Security Consultant (Authorized Penetration Test)
LimaviCTech Company
Led an authorized penetration test of an Enterprise Medical Records application, performing manual web testing with Burp Suite, OWASP ZAP, SQLMap and other tools. Assessed authentication, authorization, access control, session management, input handling, and identified SQL Injection, XSS, authorization weaknesses, sensitive‑data exposure, and session‑security flaws. Delivered proof‑of‑concept demonstrations, a formal security assessment report, and supported remediation and retesting.
Jan 2020 —
Cybersecurity Intern – Offensive Security
Offensive Security (Remote)
Conducted web application penetration tests following OWASP WSTG, covering reconnaissance, attack‑surface discovery, and manual vulnerability validation. Tested authentication, authorization, access control, input validation, and business logic; produced findings with proof‑of‑concept evidence, risk ratings, and remediation recommendations. Utilized Burp Suite, OWASP ZAP, Nmap, SQLMap and performed remediation verification.

Foundations

Education & languages

College of Health Sciences and Technology, Ijero‑Ekiti

Certificate in Medical Laboratory Technology

Quick answers

About Blessing Ebenezer

What does Blessing Ebenezer Akande do?

Where is Blessing Ebenezer Akande based?

Blessing Ebenezer Akande is based in Nigeria.

What are Blessing Ebenezer's top skills?

Blessing Ebenezer's top skills are API Security (Intermediate), Authentication & Authorization (Intermediate), BOLA/IDOR (Intermediate), CVSS V3.1 (Intermediate), DAST (Intermediate) and Data Flow Diagrams (Intermediate).

How can I hire Blessing Ebenezer Akande?

Create a free employer account on Talentta to contact Blessing Ebenezer, invite them to apply for a role or schedule an interview.

Work with Blessing Ebenezer

Great teams start with great people.

Hire Blessing Ebenezer on Talentta Build your own portfolio