I break into systems before attackers do.
Offensive security engineer and senior VAPT specialist with 5+ years across web, API, mobile, network and Active Directory environments. I chain vulnerabilities, ship the fix, and write backend code that survives contact with production. My systems work goes deeper — operating-system kernels, embedded firmware and high-performance software in C, modern C++ and Rust.
Trusted by teams I've worked with
Security-first, from silicon to source code.
I'm Maimo Harris Shaalanyuy Ndze — a Bamenda, Cameroon-based offensive security engineer, senior VAPT specialist and systems software engineer. I currently lead vulnerability assessment and penetration testing engagements as Senior VAPT Engineer at Cyenetic Solutions Ltd., and serve as CTO at N3XURA. I'm completing my BEng in Computer Engineering at the University of Bamenda. My work spans exploit development, red team operations, Active Directory attacks, API and application security, and production Django platforms — built with the same security-first mindset I bring to every engagement. Alongside offensive security I build systems software: operating-system kernels, embedded firmware, networking primitives and high-performance software in C, modern C++ and Rust, documented in my public Systems-Engineering repository.
Certified. Verifiable.
Kali Linux Certified Professional (PEN-103)
OffSec
Certified Red Team Analyst
CyberWarfare Labs · Aug 2025
Certified Associate Penetration Tester
Hackviser · Dec 2025
Certified API Security Analyst
APIsec University · Apr 2026
APISec Certified Practitioner
APIsec University · Jan 2026
CompTIA Security+
CompTIA · Dec 2023
OWASP API Security Top 10
APIsec University · Dec 2025
Securing API Servers
APIsec University · Dec 2025
API Security Fundamentals '25
APIsec University · Nov 2025
Ethical Hacker
Cisco · Dec 2024
Endpoint Security
Cisco · Aug 2024
Network Support and Security
Cisco · Jul 2024
Introduction to Cybersecurity
Cisco · Jul 2024
Introduction to Programming Using Python
Udemy · May 2024
ISC2 Candidate
ISC2 · Mar 2024
Every engagement follows the same disciplined kill chain
Scoping through exploitation to a verified fix — nothing skipped, nothing rubber-stamped.
Recon & Scoping
Asset mapping, OSINT, rules of engagement and threat modelling before a single request is sent.
Exploitation
Manual vulnerability chaining, privilege escalation and lateral movement — not just scanner output.
Reporting
CVSS-scored findings, proof-of-concept evidence, and remediation guidance mapped to OWASP & MITRE ATT&CK.
Verification
Retesting every fix until each finding is closed — not just handed off and forgotten.
Offensive security, systems software and engineering, under one roof
From full-scope red team operations and firmware/driver work to the backend systems that run in production.
Application Security Review
Secure code review and threat modelling embedded into your SDLC.
Learn moreBackend & API Development
Secure, production-grade Django and Node.js backends built to survive real traffic.
Learn moreDevice Driver Development
Kernel and bare-metal drivers for GPIO, UART, SPI, I2C, CAN, timers, interrupts and DMA.
Learn moreEmbedded Systems Programming
Embedded software in C, C++ and Rust — from bare metal to FreeRTOS and real-time task design.
Learn moreFirmware Development
Bare-metal and RTOS firmware for ARM Cortex-M / STM32 microcontrollers, written in C, C++ and Rust.
Learn moreOperating Systems & Kernel Development
Custom kernels, schedulers, virtual memory and systems software built from scratch.
Learn morePenetration Testing
Black-box, gray-box and white-box assessments across web, API, mobile and network targets.
Learn moreRed Team Operations
Full-scope adversary simulation — initial access through lateral movement to objective.
Learn more
Products, platforms and PoCs I've shipped
A mix of client work, open research and independent products.
Offensive security write-ups & research
CVE breakdowns, red team tradecraft, and lessons from the field.
Inside CVE-2025-55182: Weaponising the React2Shell RCE
How a server-side rendering flaw in a popular React framework became a full remote code execution chain — and…
Havoc C2 in Practice: Lessons From 200+ Engagements
What actually matters when you're running Havoc C2 against a live target — from OPSEC to persistence to knowi…
OWASP API Top 10 in the Real World: What I Actually Find
A breakdown of which OWASP API Top 10 categories show up most often across dozens of API pentests — and which…
Trusted by the teams I've worked with
Maimo's findings weren't just accurate — they were prioritised in a way our dev team could actually act on immediately. The retest turnaround was just as fast as the initial assessment.
Having someone who can both break the system and rebuild it securely is rare. Maimo did both for our KASH platform without slowing down the roadmap.
Got a target scope, a codebase, or a role in mind?
I'm currently accepting new penetration testing engagements and backend/security-focused development work.