Julia Pereira

Cyber Security Analyst @ Secunets Technologies Limited (STL)

About

I help businesses and organizations identify and fix security vulnerabilities in their web applications and APIs before they can be exploited. As a Cyber Security Analyst and Penetration Tester, I focus on uncovering real-world security risks through Web application testing, API security assessments, and Vulnerability analysis, with a strong emphasis on the OWASP Top 10 and OWASP API Security Top 10. My approach combines hands-on testing with clear, structured reporting to help teams understand risks and take practical steps toward remediation. In my work, I’ve identified and documented multiple vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), and access control flaws, and supported remediation efforts that led to measurable improvements in application security. I’ve also contributed to reducing exploitable risks through repeated testing cycles and validation of fixes. I’m particularly interested in strengthening application security through practical testing, secure development support, and continuous risk assessment. Open to cybersecurity roles, penetration testing opportunities, and collaborations. Feel free to connect or message me to discuss how I can support your security testing needs.

Country

Kenya

City

Nairobi County

Industry

Computer & Network Security

Skill

API Penetration Testing, API Testing, API, REST APIs, Application Programming Interfaces (API), Postman API, Vulnerability Assessment and Penetration Testing (VAPT), Firewalls, Linux System Administration, Intrusion Detection Systems (IDS), SIEM (Security Information and Event Management), Enterprise Network Security, Regulatory Compliance GDPR Data Protection Act 2019 (DPA) Policy Analysis Risk Assessment, General Data Protection Regulation (GDPR), Data Protection Act 2019 , Regulatory Compliance, Policy Analysis, Risk Assessment, Digital Marketing, Web Design

Experience

Cyber Security Analyst

Secunets Technologies Limited (STL)

2025-9 - Present · 1 yr

Nairobi County, Kenya

- Configured, installed, and managed key security tools (including firewalls and monitoring platforms) to analyze network traffic, logs, and alerts, identifying and escalating potential security incidents. - Reviewed internal policies and third-party contracts to ensure compliance with data protection regulations, including Kenya's Data Protection Act (DPA) of 2019 and GDPR. - Assisted in conducting comprehensive vulnerability assessments and recommended remediation strategies to mitigate organizational risk. - Supported end-to-end incident response activities, from initial documentation and triage to tracking resolution progress. - Researched emerging cyber threats and attack techniques, compiling intelligence reports to help strengthen organizational defenses. - Contributed to the security awareness program by developing user-friendly guides on topics like phishing detection and safe online practices.

Penetration Tester

RETISTECH

2025-9 - 2025-10 · 2 mos

Nairobi County, Kenya

Penetration Testing for Retistech Conducted a comprehensive penetration test on Retistech's website to identify security vulnerabilities and enhance its security posture. Tools and Techniques: Utilized industry-standard tools including Nmap for network scanning, Burp Suite for web vulnerability scanning, and OWASP ZAP for security testing. • Conducted comprehensive web application penetration testing on Retistech’s website, uncovering 15+ vulnerabilities including issues from the OWASP Top 10. • Produced a structured penetration test report with risk scoring, exploitation steps, and remediation guidance, improving stakeholder visibility of security risks by 100%. • Collaborated with the development team to remediate and validate fixes, resulting in a 70% reduction in exploitable vulnerabilities within two testing cycles. • Enhanced overall application security posture, ensuring compliance with industry best practices and strengthening defenses against SQL injection, XSS, and authentication flaws.