Security-first, from silicon to source code.
I'm Maimo Harris Shaalanyuy Ndze — a Bamenda, Cameroon-based offensive security engineer, senior VAPT specialist and systems software engineer. I currently lead vulnerability assessment and penetration testing engagements as Senior VAPT Engineer at Cyenetic Solutions Ltd., and serve as CTO at N3XURA. I'm completing my BEng in Computer Engineering at the University of Bamenda. My work spans exploit development, red team operations, Active Directory attacks, API and application security, and production Django platforms — built with the same security-first mindset I bring to every engagement. Alongside offensive security I build systems software: operating-system kernels, embedded firmware, networking primitives and high-performance software in C, modern C++ and Rust, documented in my public Systems-Engineering repository.
Where I've operated
Senior VAPT Engineer
Cyenetic Solutions LTD · Dhaka, Bangladesh (Remote) April 2026 — Present- Lead a team of 5 penetration testers across multiple security assessments.
- Conducted senior-level vulnerability analysis and penetration testing for client engagements.
- Delivered 50+ security assessment projects with reproducible PoC evidence and remediation guidance.
Systems Software Engineer — Independent R&D
Open Source / Systems-Engineering · Remote August 2026 — Present- Design and implement systems software from scratch in C, modern C++ and Rust — operating-system kernels, device drivers, networking primitives and low-level data structures — documented in a public engineering repository.
- Built 'Cute Toy OS', an ARM toy kernel in modern C++ with coroutine-based async, scheduler/threads, memory management and UART/GPIO/timer/interrupt-controller/watchdog drivers.
- Implemented a POSIX-compliant shell from scratch and low-level process/IPC primitives (fork, execvp, wait, redirection), plus systems-security work in binary analysis, fuzzing and exploitation.
- Maintain github.com/Maimoharris/Systems-Engineering covering OS internals, embedded/RTOS, computer architecture, high-performance computing and systems security.
Senior Penetration Tester
Skye8 · Bamenda, Cameroon August 2024 — February 2026- Conducted senior-level penetration testing across API, web and mobile application targets.
- Led red team operations and full-scope offensive engagements including malware development.
- Delivered 200+ security engagements.
- Researched and published a PoC exploit and vulnerability scanner for CVE-2025-55182 (React2Shell RCE).
Chief Technology Officer (CTO)
N3XURA · Bamenda, Cameroon February 2025 — Present- Spearhead the company's IT direction, technology strategy and application security posture.
- Mitigate cyber risks and implement secure development practices across products.
- Explore and integrate AI solutions into the product roadmap.
- Oversee network infrastructure and prepare technical performance reports for stakeholders.
Founder & Lead Software Engineer
HR-Tech · Bamenda, Cameroon 2025 — Present- Founded HR-Tech and built DevSecKit, a privacy-first browser-based platform of developer and security tools.
- Engineered DocConvert, a full-featured client-side document and image conversion platform.
- Manage deployment, cloud infrastructure and server-side security configuration for all products.
Machine Learning Intern
Skye8 · Bamenda, Cameroon August 2025 — January 2026- Developed a full-stack ML application for maize plant disease detection using Sentinel-1 SAR imagery.
- Built a PyTorch deep learning model served via a Django REST API with a ReactJS frontend.
- Deployed and maintained the application on Render, managing server configuration and API availability.
Penetration Tester (Volunteer)
IZZY Tech · Bambui, Cameroon March 2022 — July 2024- Conducted penetration tests and vulnerability assessments on company web applications and IT systems.
- Delivered prioritised remediation guidance across 150+ security engagements.
Bug Bounty Researcher (Freelance)
HackerOne, Bugcrowd, Hackprove · Remote February 2020 — Present- Discovered and responsibly disclosed critical vulnerabilities — IDOR, SSRF, SQLi, XSS, RCE and auth bypasses.
- Authored detailed technical write-ups and reproducible PoC chains for triage teams.
Academic foundation
BEng Computer Engineering
University of BamendaFocus on secure systems, low-level programming, computer architecture and cybersecurity research — applied daily to offensive security and systems engineering work.
What I go deep on
Where I train and compete
Hands-on labs, capture-the-flag events and live ranges. Verified profiles and current statistics across the platforms I use most.
TryHackMe
@agentcypher Hands-on rooms & learning paths
Hack The Box
@VDracula Machines, challenges & Pro Labs
RatCTF
@maimoharris Competitive CTF arena
OffSec
PEN-103 · labs & The Gauntlet
Hackviser
Labs, paths & certification tracks
PortSwigger
Web Security Academy · Burp Suite labs
CTFtime
Competitive CTF event trackingCompetitive finishes
Technical toolkit
Backend & Systems
Offensive Security
Systems & Low-Level Engineering
Tools & Platforms
Credentials on file
Verified industry certifications across red teaming, API security, offensive security and systems engineering. Where a public verification link exists, it is provided below.
Kali Linux Certified Professional (PEN-103)
OffSecCertified Red Team Analyst
CyberWarfare Labs · Aug 2025Certified Associate Penetration Tester
Hackviser · Dec 2025Certified API Security Analyst
APIsec University · Apr 2026APISec Certified Practitioner
APIsec University · Jan 2026Certified C++ Practitioner
Red Team Leaders · Sep 2025CompTIA Security+
CompTIA · Dec 2023OWASP API Security Top 10
APIsec University · Dec 2025 Credential ID8565a1fa-0e7e-4c07-b570-ce2844914c90
Verify credential
Securing API Servers
APIsec University · Dec 2025 Credential ID6e718db-bb80-48a0-87f8-40a90794be4d
Verify credential
API Security Fundamentals '25
APIsec University · Nov 2025 Credential IDe743debc-acb4-4d56-bef3-fd95e30cb0a0
Verify credential
Ethical Hacker
Cisco · Dec 2024Network Support and Security
Cisco · Jul 2024Introduction to Cybersecurity
Cisco · Jul 2024Introduction to Programming Using Python
Udemy · May 2024ISC2 Candidate
ISC2 · Mar 2024Internship
United Latino Students Association · Mar 2025 Credential ID81d42cf6-3fb6-4279-bf11-1e6622feb3aa
Verify credential
Credentials without a public verification link are verifiable directly with the issuing body on request.
What people say
Maimo's findings weren't just accurate — they were prioritised in a way our dev team could actually act on immediately. The retest turnaround was just as fast as the initial assessment.
Having someone who can both break the system and rebuild it securely is rare. Maimo did both for our KASH platform without slowing down the roadmap.
Let's work together
Have a scope, a role, or a product to build? I'd love to hear about it.