GOODLUCK O. PETERS

Designed and implemented a customized security awareness program on VIVIDA Reels, producing accessibility-compliant content and onboarding users, which significantly enhanced user compliance.

Wrote security policies aligned with ISO/IEC 27002:2022, covering Identity Management and Access Control tostrengthen compliance.

Migrated organizational infrastructure to Microsoft Azure, configuring RBAC, MFA, and IAM, and implemented AD DS synchronization leveraging Microsoft Sentinel (SIEM) and Purview (DLP) for enhanced cloud security.

Conducted real-world threat intelligence analysis using OpenCTI and AlienVault OTX, performing threat actor profiling with MITRE ATT&CK, Cyber Kill Chain, and the Diamond Model to inform strategic defense decisions.

Conducted a simulated penetration testing engagement covering reconnaissance, web/API exploitation, privilege escalation, and reporting. Performed assessments following the OWASP Testing Guide and PTES methodology, and produced professional pentest reports with CVSS ratings, proof of concept, and remediation steps.

Executed security operations tasks including incident response, malware analysis, phishing investigation, and vulnerability management using tools like VirusTotal and Any.run. Produced incident reports, created custom alerts in Microsoft Sentinel, and delivered executive presentations aligned with the MITRE ATT&CK framework.

Performed comprehensive Nmap scanning, OS fingerprinting, and vulnerability analysis, identifying critical weaknesses across network systems.

Leveraged Nikto, OpenVAS, Netcat, and Wireshark to conduct in-depth network assessments, ensuring comprehensive security evaluations.

Generated detailed network topology maps using Zenmap, significantly improving network visibility and supporting strategic security planning.

Executed penetration testing and participated in CTF challenges (CTFlearn, VulnHub, PicoCTF), sharpening ethical hacking skills through practical application.

Successfully conducted vulnerability exploitation, privilege escalation, and lateral movement exercises, demonstrating advanced offensive security capabilities.

Assessed social engineering risks and developed actionable mitigation techniques, enhancing organizational resilience against human-centric attacks.

Specialized in web application penetration testing, identifying and exploiting critical vulnerabilities like XSS, CSRF, and SQLi.

Engaged in Capture the Flag (CTF) events, significantly enhancing ethical hacking and problem-solving skills through practical application.

Conducted comprehensive security assessments utilizing Nmap, Burp Suite, and Metasploit to identify system weaknesses across diverse environments.

Executed Android penetration testing on the DIVA app and generated detailed remediation reports, improving mobile application security posture.

Performed reconnaissance and ethical hacking across multiple OS environments, strengthening cross-platform security expertise.