Olalekan Musa
Detection Engineer
4+ years exp
Bash
JavaScript
TypeScript
Node JS
Python
System Architecture: 6/10
Security & Auth: 6/10
Reliability & Observability: 6/10
Active 2 days ago
+234 (817) 9343765
Invite to interview
Message
Download CVCV
Overview
Technical skills
Timeline
Roles
Overview
Fullstack developer focused on React-based interactive frontends and cloud-native security automation with proven system-design and reliability strengths. The strongest proven skill is multi-cloud threat detection and SOAR pipeline engineering, as evidenced by the MITRE mapping and containment workflow implementation (mitre/attack-mapper.ts and engines/containment-worker.ts). Public code shows limited automated test coverage and few frontend integration tests or explicit ARIA-managed widgets, so testing and exhaustive a11y are not evidenced.
Technical skills
Bash
JavaScript
TypeScript• Senior
Node JS• Senior
Python• Senior • 4y+
Node JS
Prisma
Express
Axios
Nodemailer
Python
Boto3• 4y+
Databases
DynamoDB
PostgreSQL
Supabase
Frontend
React.js
Recharts
Three.JS
Vite
React Router
React Query
Tailwind CSS
DevOps
Amazon EC2
AWS Lambda
Azure
CI/CD
Cloudflare
Rest API
CI/CD
AWS
GitHub Actions
Kubernetes
Cybersecurity
Censys
CIS Benchmarks
Defense in Depth
Microsoft Sentinel
Shodan
Snyk
Threat Modeling
Trivy
VirusTotal
Metasploit• 4y+
Nessus• 4y+
Cloudflare WAF
STRIDE
Microsoft Entra ID
MITRE ATT&CK
OWASP ZAP
Semgrep
Timeline
Cloud Security & DevSecOps Engineer
•
Middle
EVS Healthcare Solutions Ltd
•
Freelance
Architected end-to-end cloud security controls from design through deployment to harden application and infrastructure exposure. Strengthened Cloudflare edge protections and applied HTTP security header best practices to improve the overall security posture. Supported deployment readiness with a defense-in-depth approach targeting common web and edge threats.
Cloudflare WAF
Cloud Security & DevSecOps Engineer
•
Middle
Rasoaf Travels & Tours Limited
•
Freelance
Implemented a CI/CD security pipeline integrating SAST, dependency scanning, and DAST for continuous vulnerability detection. Built layered edge and application protection using Cloudflare WAF and security hardening headers. Focused on improving detection coverage and reducing time-to-action for newly introduced issues.
GitHub Actions
Semgrep
OWASP ZAP
Cloudflare WAF
Cloud Security & DevOps Engineer
•
Middle
TV-Tay Wellbeing Initiative
•
Freelance
Designed production cloud security controls focused on threat detection and incident response workflows. Implemented centralized CloudTrail auditing and introduced Cloudflare WAF protections for abusive traffic. Performed architecture reviews using STRIDE threat modeling and helped improve operational response time through automated containment workflows.
AWSsince 2024
Cloudflare WAFsince 2024
STRIDE
Founder & Lead Detection Engineer
•
Executive
LOSAF
•
Cofounder
Founded and architected a multi-cloud detection platform that unifies AWS CloudTrail, Azure Entra ID, and Kubernetes audit logs for centralized detection and investigation. Built a declarative detection rule engine with MITRE ATT&CK mappings and risk-based prioritization, plus detection-to-response recommendation logic. Developed a production REST API and SOC-style triage dashboard for alert lifecycle management, and published the platform as open source.
AWS
Microsoft Entra ID
Kubernetes
MITRE ATT&CK
Python
PostgreSQL
Supabase
Cloud Security Consultant
•
Middle
OAF International Corporate Limited
•
Contractor
Conducted vulnerability assessments and controlled penetration testing using Nessus and Metasploit. Built an automated AWS Cloud Security Audit Tool with Python and Boto3 to benchmark environments against CIS controls. Produced structured findings for misconfigurations across IAM, S3, EC2, CloudTrail, KMS, and CloudWatch.
Nessus
Metasploit
Pythonsince 2022
Boto3
Senior Backend Developer
Confidence: Medium API Engineer
Cloud security-focused backend engineer at a Senior level specializing in multi-cloud threat detection and automated response pipelines. The strongest proven skill is building detection and response workflows, demonstrated by engines/containment-worker.ts and mitre/attack-mapper.ts which implement idempotency, audit trails, containment actions and MITRE enrichment. Public code does not show test coverage, explicit schema migration history or load-testing artifacts.
API Design
5/10
How well APIs are designed
Reasonable REST surface with input validation and explicit idempotency guards but lacking formal versioning, pagination, or a documented error contract.
Evidence
LOSAF-multi-cloud-detection-pipeline/api/server.ts: /ingest endpoint with input validation and response error handling
LOSAF-multi-cloud-detection-pipeline/engines/containment-worker.ts: idempotency check via prisma.incidents.findFirst and workflow_executions upsert
Data Layer & Database
4/10
Working with databases
Consistent Prisma usage with upserts and connection warm-up, but no explicit transaction boundaries, migration history, or hand-tuned SQL visible.
Evidence
LOSAF-multi-cloud-detection-pipeline/mitre/attack-mapper.ts: prisma.rawEvent.findMany and prisma.rawEvent.update
LOSAF-multi-cloud-detection-pipeline/api/server.ts: warmDatabase uses prisma.$queryRaw and multiple incidents.upsert calls
LOSAF-multi-cloud-detection-pipeline/engines/containment-worker.ts: upsert/update patterns for incidents and workflow_executions
Scalability & Performance
5/10
Handling load and speed
Architected for scale with queue routing and worker processes, plus DB warm-up to mitigate cold starts; lacks explicit caching/invalidation strategies or measured perf artifacts.
Evidence
LOSAF-multi-cloud-detection-pipeline/api/server.ts: calls routeEvent and triggers containmentWorker based on thresholds
LOSAF-multi-cloud-detection-pipeline/engines/containment-worker.ts: worker pattern and queueRetry call for failure handling
System Architecture
6/10
Overall system structure
Clear modular decomposition into collectors, normalizer, MITRE mapper, detection engines and workers with workflow tracking and audit trails, showing deliberate architecture choices.
Evidence
LOSAF-multi-cloud-detection-pipeline/collectors/kubernetes/auditLogs.ts: collector component with event persistence
LOSAF-multi-cloud-detection-pipeline/normalization/event-normalizer.ts: normalization module producing unified schema
LOSAF-multi-cloud-detection-pipeline/mitre/attack-mapper.ts: enrichment/mapping service
Security & Auth
6/10
Protecting data and access
Strong security awareness evidenced by input validation, idempotency, containment flows using Graph API, heuristic detection, and audit logging; token lifecycle and fine-grained auth mechanics are not shown.
Evidence
LOSAF-multi-cloud-detection-pipeline/engines/containment-worker.ts: input validation, account disable and revokeSignInSessions calls, rollback record creation
LOSAF-multi-cloud-detection-pipeline/normalization/event-normalizer.ts: suspicious indicator detection and severity adjustments
LOSAF-multi-cloud-detection-pipeline/collectors/kubernetes/auditLogs.ts: privileged event handling and safe fallback when cluster unavailable
Reliability & Observability
6/10
Stability and monitoring
Good reliability and observability patterns with retries, queue retry handling, DB warm-up, structured audit logs and correlation ids; graceful shutdown, circuit breakers and load testing artifacts are absent.
Evidence
LOSAF-multi-cloud-detection-pipeline/api/server.ts: warmDatabase retry loop to warm DB connections
LOSAF-multi-cloud-detection-pipeline/engines/containment-worker.ts: try/catch with queueRetry and logEvent usage
LOSAF-multi-cloud-detection-pipeline/mitre/attack-mapper.ts: guarded DB updates and reporting with error handling
Expertise
Microservices & API Architecture• Middle
Messaging & Real-time• Middle
Node.js• Middle
Industries
Cybersecurity• Senior
Information Technology• Middle
Technologies
Node JS• Senior
Supabase
Express
Azure
Prisma
Axios
Nodemailer
Cloud• mentioned only
Cloudflare• mentioned only
Recommendations
- Develop event-driven, multi-cloud threat detection and SOAR workflows integrating collectors, normalization, enrichment and worker fleets.
- Implement and extend queue-based worker systems and reliable retry handling for high-throughput telemetry ingestion.
- Build identity containment integrations and safe rollback workflows for incident response automation.
- Harden production-grade observability and resilience features such as structured metrics, graceful shutdown, circuit breakers and documented schema migrations.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories:
Senior Frontend Developer
Confidence: Medium Fullstack
Fullstack developer focused on React-based interactive frontends and cloud-native security automation with proven system-design and reliability strengths. The strongest proven skill is multi-cloud threat detection and SOAR pipeline engineering, as evidenced by the MITRE mapping and containment workflow implementation (mitre/attack-mapper.ts and engines/containment-worker.ts). Public code shows limited automated test coverage and few frontend integration tests or explicit ARIA-managed widgets, so testing and exhaustive a11y are not evidenced.
UI Component Architecture
6/10
How interface parts are built
Deliberate component and design-token architecture with custom hooks and reusable 3D/visual modules, showing composition and separation of concerns but limited evidence of a bespoke component library or broad test coverage.
Evidence
Lakewest1/Rasoaf/src/components/gateway/constants.js: central design tokens, timing/easing and breakpoints
Lakewest1/Rasoaf/src/components/gateway/three/FlightNetwork/useDynamicRoutes.js: custom route lifecycle hook with timers and lifecycle cleanup
Lakewest1/Rasoaf/src/components/layout/Footer.css: component-scoped styling and design token usage
Responsive & Cross-browser
7/10
Works on all screens and browsers
Responsive, fluid layout and progressive-enhancement practices are present (clamp, breakpoints, prefers-reduced-motion, hover:none), indicating cross-device and reduced-motion support.
Evidence
Lakewest1/Rasoaf/src/components/layout/Footer.css: responsive grid, multiple breakpoints, prefers-reduced-motion rules
Lakewest1/Rasoaf/src/components/travel/styles/HeroSection.css: clamp-based fluid type, responsive media queries
Lakewest1/Rasoaf/src/components/gateway/constants.js: BREAKPOINTS definition used as single source of truth
Performance Optimization
7/10
Speed of the interface
Concrete, measured optimizations in performance-sensitive code (object pooling, caching, precomputed constants) and lifecycle/timer management to avoid leaks and allocations.
Evidence
Lakewest1/Rasoaf/src/components/gateway/three/FlightNetwork/geoUtils.js: Vector3Pool, latLngToVec3Cached, precomputed constants and cache eviction
Lakewest1/Rasoaf/src/components/gateway/three/FlightNetwork/useDynamicRoutes.js: staggered spawn scheduling, timer tracking and cleanup to avoid leaks
Lakewest1/Rasoaf/src/components/gateway/constants.js: pre-computed gradients and durations to avoid runtime recompute
Accessibility & Semantics
5/10
Usable for everyone
Found solid basic a11y practices in CSS (focus-visible outlines, min touch sizes, reduced-motion support) but limited evidence of ARIA, keyboard-managed custom widgets, or automated a11y checks in CI.
Evidence
Lakewest1/Rasoaf/src/components/layout/Footer.css: focus-visible outline rules and min-touch sizing
Lakewest1/Rasoaf/src/components/travel/styles/HeroSection.css: reduced-motion media query
Lakewest1/Rasoaf/src/components/gateway/constants.js: design tokens that support accessible timing (TIMING/DURATIONS)
State Management & Data Flow
6/10
Managing data in the app
Robust server-state and event-driven flows are present in the detection pipeline with explicit idempotency, upserts, retries and queue routing; frontend state hooks show lifecycle care but less evidence of complex optimistic updates or cancellation patterns on the client.
Evidence
Lakewest1/LOSAF-multi-cloud-detection-pipeline/api/server.ts: ingestion pipeline with enrichment, UEBA/ML integration, DB upsert and auto-containment gating
Lakewest1/LOSAF-multi-cloud-detection-pipeline/engines/containment-worker.ts: idempotency checks, workflow tracking, rollback record creation and retry queueing
Lakewest1/LOSAF-multi-cloud-detection-pipeline/normalization/event-normalizer.ts: normalization loop with DB updates and error handling
UX & Visual Polish
5/10
Look and feel quality
High visual polish with considered animations, timing and reveal effects that improve perceived performance, but little evidence of progressive loading states, skeletons, undo flows or user-research-driven UX metrics.
Evidence
Lakewest1/Rasoaf/src/components/gateway/constants.js: TIMING, EASING and DURATIONS used for visual choreography
Lakewest1/Rasoaf/src/components/travel/styles/HeroSection.css: detailed animated hero styles and scroll indicator
Lakewest1/Rasoaf/src/components/layout/Footer.css: reveal-on-scroll and interactive button states
Expertise
React• Middle
Frontend Architecture & Build Tools• Middle
Web Performance & Optimization• Middle
Industries
Cybersecurity• Senior
Technologies
Tailwind CSS
Three.JS
React.js
Vite
React Query
Recharts
React Router
Azure• mentioned only
Cloud• mentioned only
Kubernetes• mentioned only
Recommendations
- Lead development of real-time security dashboards and fullstack SOAR features that integrate normalized telemetry with actionable workflows (use mitre/attack-mapper.ts and api/server.ts patterns).
- Implement high-performance, interactive 3D visualizations and front-end components (use geoUtils.js and useDynamicRoutes.js as starting points).
- Accept ownership of backend pipeline components that require idempotency, retries and audit trails (containment-worker.ts, event-normalizer.ts).
- Add test harnesses and CI checks (unit, integration, and a11y/axe) to increase confidence for production deployments.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories:
Senior QA Engineer
Confidence: Medium Generalist
Security-focused developer (Senior-level) specializing in multi-cloud threat detection and automated containment workflows; the single strongest strength is designing pragmatic detection-to-response pipelines. The strongest proven skill is implementing production-grade ingestion, normalization, MITRE mapping and containment orchestration as seen in api/server.ts and engines/containment-worker.ts. There is little to no public evidence of structured test suites, contract tests, or CI test-artifact management in the codebase.
Test Automation Frameworks
1/10
Building automated tests
Minimal test framework or fixtures present; test runner appears in package.json but there are no visible test suites, fixtures, or mock servers.
Evidence
Rasoaf/package.json: 'test' script uses vitest ('vitest run --passWithNoTests') but no test files visible
LOSAF-multi-cloud-detection-pipeline/package.json: 'test' is a placeholder (no tests)
Test Coverage & Strategy
1/10
What and how to test
No structured test coverage or risk-based test strategy; no property-based tests, negative-path test suites, or mutation testing present.
Evidence
Rasoaf/package.json: devDependencies include vitest but no test files are present
LOSAF-multi-cloud-detection-pipeline/package.json: test script is a placeholder and README indicates no tests
API & Integration Testing
2/10
Testing how parts work together
Strong API and integration surface exists (ingest endpoints, collectors, DB persistence) but there is little to no evidence of contract testing, schema validation tests, or simulated error-path coverage.
Evidence
LOSAF-multi-cloud-detection-pipeline/api/server.ts: ingestion endpoint with DB upsert, UEBA/ML calls and auto-containment logic
LOSAF-multi-cloud-detection-pipeline/collectors/kubernetes/auditLogs.ts: collector that normalizes and persists events to prisma.rawEvent
Performance & Load Testing
2/10
Testing speed under load
Code shows performance awareness and micro-optimizations, but there is no load or performance testing harness (k6, locust, etc.) or SLO-based test scenarios.
Evidence
Rasoaf/src/components/gateway/three/FlightNetwork/geoUtils.js: object pooling, caching and allocation-reduction optimizations
Rasoaf/src/components/gateway/three/FlightNetwork/useDynamicRoutes.js: staggered/batched spawning to limit active routes
Bug Reporting & Analysis
3/10
Finding and describing bugs
In-code 'FIX' comments, careful error-handling and improved audit logging indicate iterative bug-fixing and root-cause awareness, but there are no public bug tracker issues or linked external reports.
Evidence
LOSAF-multi-cloud-detection-pipeline/engines/containment-worker.ts: multiple 'FIX' comments describing prior bug conditions and corrective changes
LOSAF-multi-cloud-detection-pipeline/mitre/attack-mapper.ts: 'FIX' note for bigint conversion and defensive DB update handling
CI Test Integration
2/10
Running tests automatically
Basic CI artifacts and scripts exist but there is no evidence of test artifact management, per-test quarantine, or advanced CI test-engineering.
Evidence
Rasoaf/.github/workflows/security-cicd.yml: workflow file present with event: deployment
Rasoaf/package.json: lint and test scripts intended for CI use
Expertise
API Testing & Contract Validation• Junior
Industries
Cybersecurity• Senior
Technologies
CI/CD
Python• Senior • 4y+
TypeScript• Senior
AWS
Kubernetes
Boto3• 4y+
Azure• mentioned only
Cloud• mentioned only
Recommendations
- Develop multi-cloud detection and SOAR playbooks and automation for ingestion-to-containment pipelines (ingest, normalize, map, triage, act).
- Build developer-facing security automation tools and incident response workers that include contract tests and negative-path test suites for reliability.
- Implement a test infra: contract tests for API schemas, isolated integration tests with testcontainers or sandboxed emulators, and property-based tests for normalization logic.
- Add CI test engineering: per-test artifacts, selective runs on diffs, and quarantining for flaky tests to improve pipeline stability.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories: