Gbenga KakaGbenga Kaka
Career trajectory

Programs delivered. Risks reduced. Systems hardened.

Over a decade across cloud, application security and engineering — measured in throughput, risk reduction and work that actually shipped.

10+
Years experience
04
Roles
04
Companies
Timeline

  1. Jan 2025 — Present

    Amazon Web Services (AWS)

    Security Technical Program Manager

    Current

  2. Dec 2021 — Nov 2024

    Tata Consultancy Services

    Senior Application Security Engineer

  3. Nov 2019 — Nov 2021

    AT&T

    Application Security Engineer

  4. Nov 2017 — Nov 2019

    Xpress Payment Solutions Limited

    Senior Software Engineer

Jan 2025 — PresentCurrent

Amazon Web Services (AWS)

Security Technical Program Manager

United States

Lead end-to-end delivery and security architecture for cloud-native, SaaS and AI-driven programs across AWS and Azure — running 8–10 concurrent initiatives from intake through execution while aligning technical work with compliance and business priorities.

Cloud SecurityAI/LLM SecurityIAMAWS & AzureProgram Delivery
Key contributions
8
  • Established structured intake, prioritization and execution workflows — program throughput up 30%, delivery friction down across teams.
  • Led identity and access management initiatives, reducing over-privileged access by 40% through role redesign and policy enforcement.
  • Conduct security architecture reviews across cloud-native, SaaS and AI-driven systems, surfacing weaknesses in authentication models, access controls and data-exposure paths.
  • Define secure integration patterns for APIs, third-party platforms and AI/LLM services, mitigating AI-specific risks such as prompt injection and data leakage.
  • Own program-level financial oversight — budget planning and cost tracking for security tooling and infrastructure initiatives.
  • Manage third-party vendors and security-tool integrations, ensuring alignment with architectural standards and delivery timelines.
  • Built executive-level KPI dashboards tracking program health, delivery progress and risk exposure to enable data-driven decisions.
  • Identified and mitigated program-level risks early by mapping technical dependencies, reducing escalations by 25%.
Dec 2021 — Nov 2024

Tata Consultancy Services

Senior Application Security Engineer

Remote

Led application security and secure-design improvements across enterprise applications and cloud environments, embedding secure-by-design into the SDLC across Microsoft and Verizon engagements.

AppSecSAST/DASTThreat ModelingAzure APIMOAuth2 / OIDC
Key contributions
9
  • Reduced production security defects by 30–40% through early-stage vulnerability identification with engineering teams.
  • Integrated SAST, DAST and SCA tools into CI/CD pipelines for automated security validation pre-deployment.
  • Performed advanced security testing using Burp Suite and OWASP ZAP, including manual validation of complex vulnerabilities.
  • Conducted secure code reviews across .NET, Java and Node.js applications.
  • Led STRIDE-based threat modeling exercises influencing secure architecture decisions.
  • Built Python and Bash automation reducing manual security effort by 40%.
  • Microsoft engagement — architecture-driven threat modeling for APIs and distributed systems, remediating design-level flaws in authentication, authorization and integration layers.
  • Microsoft engagement — implemented segmentation and workload isolation in containerized environments and built centralized logging pipelines for audit readiness.
  • Verizon engagement — designed secure APIs with Azure API Management, enforcing OAuth2 and OpenID Connect across distributed systems.
Nov 2019 — Nov 2021

AT&T

Application Security Engineer

United States · Remote

Secured enterprise mobile applications and APIs, coordinating large-scale security assessments across globally distributed teams and clients.

Mobile SecurityAPI SecuritySession ManagementEncryption
Key contributions
5
  • Conducted mobile application and API security assessments, identifying vulnerabilities in authentication and session management.
  • Validated secure communication and encryption implementations across client–server channels.
  • Coordinated large-scale security assessment initiatives across enterprise applications and concurrent projects.
  • Developed structured workflows for vulnerability tracking, remediation and reporting, improving operational efficiency.
  • Partnered with engineering teams to integrate security practices into the software lifecycle without disrupting delivery velocity.
Nov 2017 — Nov 2019

Xpress Payment Solutions Limited

Senior Software Engineer

Nigeria

Engineered modern applications on .NET and SQL Server, modernizing legacy systems and building reusable platform components.

.NETSQL ServerAngularSpring Boot
Key contributions
3
  • Built modern apps with .NET and SQL Server, significantly improving overall system performance.
  • Collaborated with front-end developers on reusable libraries that reduced future development time.
  • Developed secure, scalable applications across Angular, React, Node.js, Java, Spring Boot and .NET.
What's next

Looking for someone to drive secure delivery?

Get in touchExplore skills