Kelechi Michael Uma
Cybersecurity Analyst | Ethical Hacker | Pen Tester | Software Tester | Security Tester
I help businesses secure their websites and protect against cyber threats through comprehensive security assessments and ethical hacking. I test softwares for vulnerabilities and security flaws. I find hidden loopholes in your softwares.
About Me
From electrical engineering to defending the digital world
I'm a Quality Assurance (QA) and Cybersecurity professional based in Lagos, currently working as a QA Intern at Famous Holding, where I test software for functional correctness and security weaknesses side by side. My background is actually in Electrical/Electronics Engineering (B.Eng, Michael Okpara University of Agriculture) — the shift into tech started with IT support work, and curiosity about *why* systems fail turned into a real focus on how they get broken into.
Since then I've built hands-on skill through Cisco Academy training (Introduction to Cybersecurity, Ethical Hacking, and ongoing Network Defense), practical labs in a personal Kali Linux environment, and real testing work — including confidential freelance engagements checking client websites for data exposure and leaks, alongside my day-to-day QA role.
I believe in responsible disclosure and testing only within clear authorization — every lab project on this site, from vulnerability discovery to social-engineering simulations, was run in an isolated environment I control, never against real targets. That discipline is the same one I bring to client work.
My goal is straightforward: help businesses actually understand their security posture — not just get a checklist — and build the kind of quality-first, security-aware engineering practice I'd want protecting my own systems.
Web Security
Specializing in identifying and mitigating common web vulnerabilities including OWASP Top 10.
Vulnerability Assessment
Systematic evaluation of security weaknesses in systems and applications.
Ethical Hacking
Legal and authorized testing to identify vulnerabilities before malicious actors do.
Software Testing
Functional, regression, and exploratory testing to catch bugs before users ever see them.
Penetration Testing
Hands-on offensive testing in personal lab environments — from network reconnaissance to exploitation.
Experience
Practical experience across QA, IT support, and troubleshooting — the foundation my security testing work builds on.
QA Intern — Famous Holding
Feb 2026 — Present- Support software quality activities across functional, regression, and security testing.
- Identify, document, and communicate application issues clearly to technical and non-technical stakeholders.
- Apply a security-aware lens to QA work — testing for common web vulnerabilities alongside standard functional coverage.
Independent Contract Security Testing — Freelance
Ongoing, alongside main role- Perform website security reviews for private clients, including a confidential engagement testing a client's site for data exposure and leak risks.
- Scope testing to client authorization, then document findings and recommended fixes in plain language.
IT Support — Elmas
Dec 2023 — Feb 2026- Supported day-to-day IT operations and troubleshooting, maintaining reliable system uptime for users.
- Assisted users with technical issues, translating vague symptom reports into clear, actionable problem statements.
IT Support — 19 Empire
Dec 2021 — Dec 2023- Provided technical support and troubleshooting for end users and computer systems.
- Resolved connectivity, software, and general IT issues under time pressure.
- Applied networking and systems knowledge to diagnose root causes of technical problems.
Skills & Tools
I work with industry-standard tools and continuously expand my technical skillset to stay ahead of emerging threats.
Burp Suite
Web vulnerability scanner and proxy tool for security testing
Nmap
Network discovery and security auditing tool
Wireshark
Network protocol analyzer for traffic inspection
OWASP Top 10
Understanding and testing for top web security risks
Basic Penetration Testing
Systematic testing methodologies and reporting
Additional Knowledge
Certifications & Education
B.Eng, Electrical/Electronics Engineering
Michael Okpara University of Agriculture, Umudike
Introduction to Cybersecurity
Cisco Academy
Ethical Hacking
Cisco Academy
Network Defense
Cisco Academy — in progress
Interconnecting Cisco Networking Devices (ICND1) v3
Alison
Information Management: Strategy & Data Protection
Alison
Emotional Intelligence for Software Developers
Udemy
Services
Professional security services to help identify and address vulnerabilities in your digital infrastructure.
- Automated vulnerability scanning
- Manual verification of findings
- Detailed security report
- Remediation recommendations
- Asset discovery
- Vulnerability identification
- Risk prioritization
- Actionable insights
- Black/gray box testing
- Exploitation attempts
- Security gap analysis
- Executive summary report
Projects
Hands-on security projects demonstrating practical experience with vulnerability identification and ethical hacking techniques.
Key Findings
- Identified SQL injection vulnerabilities
- Exploited XSS flaws at multiple security levels
- Performed CSRF attacks
- Documented findings and remediation steps
Key Findings
- Mapped network topology
- Identified 20+ services across multiple hosts
- Detected outdated software versions
- Created detailed network documentation
Key Findings
- Found reflected XSS in search functionality
- Discovered stored XSS in user comments
- Tested DOM-based XSS vectors
- Provided secure coding recommendations
Key Findings
- Practiced target enumeration into exploit selection workflow
- Worked through common vulnerable-service exploitation paths
- Documented each step to build a repeatable personal methodology
- Confirmed lab isolation before running any exploit
Key Findings
- Automated repetitive scan-output parsing
- Used AI assistance to draft first-pass recon notes for review
- Kept a human-in-the-loop review step before acting on any output
Key Findings
- Studied common phishing page structures and red flags
- Practiced identifying the same techniques from a defender's perspective
- Kept the exercise fully contained to a local/isolated lab environment
Contact
Interested in working together? Let's discuss how I can help secure your digital assets.