Gbenga KakaGbenga Kaka
Career trajectory

Programs delivered. Risks reduced. Systems hardened.

A decade and a half across cloud, application security and engineering — measured in throughput, risk reduction and work that actually shipped.

15+
Years experience
04
Roles
02
Disciplines
Timeline

  1. Jan 2025 — Present

    Amazon Web Services (AWS)

    Security Technical Program Manager

    Current

  2. Dec 2021 — Nov 2024

    Tata Consultancy Services

    Senior Application Security Engineer

  3. Nov 2019 — Nov 2021

    AT&T

    Application Security Engineer

  4. Nov 2017 — Nov 2019

    Xpress Payment Solutions Limited

    Senior Software Engineer

Jan 2025 — PresentCurrent

Amazon Web Services (AWS)

Security Technical Program Manager

United States

Own delivery of enterprise cybersecurity programs across cloud, application and identity domains, managing 8–10 concurrent initiatives from intake through execution.

Cloud SecurityIAMGovernanceProgram Delivery
Key contributions
7
  • Established structured intake, prioritization and execution workflows — program throughput up 30%, delivery friction down across teams.
  • Led identity and access management initiatives, reducing over-privileged access by 40% through role redesign and policy enforcement.
  • Drove integration of newly onboarded systems into the security ecosystem, accelerating secure onboarding timelines by 30%.
  • Identified and mitigated program-level risks early by mapping technical dependencies, reducing escalations by 25%.
  • Partnered with engineering, security, compliance and infrastructure teams across 15–25 stakeholders per initiative.
  • Built executive-level dashboards and reporting, improving visibility into risk posture and delivery progress.
  • Translated complex technical risks into clear business impact, enabling leadership to make informed prioritization decisions.
Dec 2021 — Nov 2024

Tata Consultancy Services

Senior Application Security Engineer

Remote

Led application security strategy across web, API and cloud-native platforms, embedding secure-by-design principles into the SDLC.

AppSecSAST/DASTDevSecOpsThreat Modeling
Key contributions
8
  • Reduced production security defects by 30–40% through early-stage vulnerability identification with engineering teams.
  • Integrated SAST, DAST and SCA tools into CI/CD pipelines for automated security validation pre-deployment.
  • Performed advanced security testing using Burp Suite and OWASP ZAP, including manual validation of complex vulnerabilities.
  • Conducted secure code reviews across .NET, Java and Node.js applications.
  • Designed and implemented API security controls for REST and GraphQL services.
  • Led STRIDE-based threat modeling exercises influencing secure architecture decisions.
  • Built Python and Bash automation reducing manual security effort by 40%.
  • Secured containerized environments (Docker, Kubernetes) including image scanning and runtime protection.
Nov 2019 — Nov 2021

AT&T

Application Security Engineer

United States · Remote

Performed architecture-driven threat modelling for APIs and distributed systems, with a focus on identity, segmentation and audit readiness.

API SecurityIdentityAzure APIMOAuth2 / OIDC
Key contributions
5
  • Identified and remediated design-level vulnerabilities in authentication, authorization and integration layers.
  • Implemented segmentation and workload isolation strategies in containerized environments.
  • Assessed systems against security policies, documenting control gaps and remediation plans.
  • Built centralized logging pipelines to improve visibility and audit readiness.
  • Designed secure APIs using Azure API Management with OAuth2 and OpenID Connect.
Nov 2017 — Nov 2019

Xpress Payment Solutions Limited

Senior Software Engineer

Nigeria

Engineered modern applications on .NET and SQL Server, modernizing legacy systems and building reusable platform components.

.NETSQL ServerAngularSpring Boot
Key contributions
3
  • Built modern apps with .NET and SQL Server, significantly improving overall system performance.
  • Collaborated with front-end developers on reusable libraries that reduced future development time.
  • Developed secure, scalable applications across Angular, React, Node.js, Java, Spring Boot and .NET.
What's next

Looking for someone to drive secure delivery?

Get in touchExplore skills