About

Cross River → Abuja · Security × Cinema

Abang Obed

Security Engineer · Security Researcher · Filmmaker

I’m a curious person who enjoys building things and understanding how they work. That curiosity led me into cybersecurity, where I work across detection engineering, security operations, malware, and application security research. I spend most of my time exploring how systems behave, how attacks evade visibility, and how we can build better ways to detect and respond to them. I enjoy turning ideas into practical tools and research that people can actually use.

Outside of cybersecurity, I write and make films. It may seem like a different world, but it is driven by the same curiosity of asking questions, solving problems, and telling stories that matter. I’m always learning, building, and looking for opportunities to work with people who enjoy solving meaningful problems. If that sounds like you, I would be happy to connect.

Download CV (PDF)
Abang Obed

Education & Certifications

B.Tech in Cyber Security Science

Federal University of Technology, Minna, Nigeria — 2021–2026

HTB Certified Penetration Testing Specialist (CPTS)

HackTheBox — Issued Feb 2024 · Credential ID HTBCERT-2508B8ABE8

CPTS certificate

Experience

Kynettic
Security Engineer

Kynettic

Lead Security Engineer (Contract)

July 2026 – Present

  • Web, API and mobile security assessments across authentication, authorization, session management, business logic and injection.
  • Protocol-layer and application security in DeFi systems: swap-logic integrity, access control and transaction validation.
  • Structured reports with severity ratings, reproduction steps and prioritized remediation.
NEMA-HQ
Security Operations

NEMA-HQ

Security Operations Specialist (Internship)

June 2025 – January 2026

  • Live government SOC security event monitoring, SIEM alert triage and incident response.
  • Active Directory and endpoint hardening on HP ProLiant with MikroTik, Cisco and EDR.
  • Vulnerability assessment of network assets incl. Huawei NetEngine CX600; supported GIS data-relay and Mission Control.
Visit →
ATL Labs (PinkDraconian)
Technical Security Writer

ATL Labs (PinkDraconian)

Technical Security Writer

June 14 – July 29, 2025

  • Developed RBAC security courseware on access-control architecture, policy design and enforcement.
  • Research and technical writing on identity management and security governance for practitioners.
Phlex IT Events
Backend Developer

Phlex IT Events

Staff Backend Developer

April 2024 – July 2025

  • REST APIs with NestJS and PostgreSQL for auth, OTP verification, session management and ticketing at scale.
  • Server-side pagination and caching across 50,000+ attendee records; MongoDB ORM and CI/CD.
Visit →
IDE Nigeria
Web & System Architect

IDE Nigeria

Sr. Website Developer & System Architect (Contract)

January 2021 – January 2026

  • Multi-company operations platform (Simdozi, Marblefoods, Stonerockers, Aoahomes, BigHomes) with Node.js, Laravel, Three.js, C# and Azure.
  • Mobile-first responsive UI with Tailwind CSS (+57% engagement); resolved IAM misconfigurations and cloud deployment issues.
Visit →
234coins.net
Cloud — Freelance (Upwork)

234coins.net

AWS Cloud Engineer

December 2023

  • Optimized AWS IAM service roles, reducing deployment errors by 50% on the Unity runtime engine.
  • Diagnosed cloud CORS misconfigurations and reliability issues.
  • Real-time Redis monitoring for token loading and device activity.
Visit →
GigAfro / StreetVibez
Startup Marketplace

GigAfro / StreetVibez

Security Engineer — Freelance Marketplace

January 2026

  • Built and launched a production marketplace connecting freelancers to gigs with real-time geolocation and ranking.
  • Designed a dispatch system across Android, iOS and web clients in a live production environment.
Visit →

Engineering Projects

Everything else, cyber and otherwise, lives on github.com/d3vobed.

GigAfro / StreetVibez

Live freelance marketplace · Flutter, Swift, React, GraphQL · Jan 2026

Code →

Conversational AI for Dementia Care

NCAIR · emotion-aware dialogue · $1k grant · 2025

LiDAR Spatial Assistant for Blind Users

Gemini Hackathon · ARKit, YOLOv9, ARCore · 2026

AI Budgeting Agent

Opik Comet Runner-Up · MCP stack · 2026

Azure Stack USSD

Scalable USSD on Azure Stack Hub + Africa’s Talking · 2023

Video Storybook

AI storyboarding: MiDaS, TensorFlow, ControlNet

Soccer Behavioural Analysis (SBA)

Mobile analysis app for player mood & performance

Circles (snapBLE)

P2P low-bitrate Bluetooth video calling protocol

React-OauthRouter

OAuth for react-router (Facebook, Google, GitHub, LinkedIn, Twitter)

Code →

AFTNStreamDecoder

Decoder for ATS emergency-signal messages, ML-assisted

Chameleon

Volumetric facial scanner for facial replacement in film

Coming soon

Autobot OS

Python & C++ OS for file management, retrieval and admin tasks

Coming soon

Security Disclosures

Google ChromeTriaged

Polyglot ZIP executed as HTML (stored XSS via MIME discard)

ElasticTriaged

APM Server API key cache bypasses secret validation + DoS

ElasticTriaged

Arbitrary file write via intake-receiver path traversal

X / xAITriaged · Open

Messaging restriction bypass via post-sharing (Community Notes)

Rockstar GamesTriaged

Reflected XSS on VPN getconfig.esp (CVE-2025-0133)

FigmaTriaged

IDOR on chapter membership (deleted / deactivated chapters)

SyfeTriaged

Web Cache Deception via semicolon delimiter (api.syfe.com)

CodeSandboxCredited

High-severity GraphQL VM allocation bypass (GHSA-5jw5-g7mr-h26r)

CTFs & Hackathons

HackTheBox — CPTS Certified

Active Directory, pentesting, vuln assessment · Feb 2024

Link →

TryHackMe

CTF / hands-on security labs

Link →

CyberSafe HQ — HackTheBox 1st Place

Competition winner · 2023

Gemini Hackathon — LiDAR Spatial Assistant

Special Recognition · Feb 2026

Link →

Opik Comet — AI Budgeting Agent

Runner-Up · Jan 2026

NCAIR Hackathon — Dementia Chatbot

Winner · $1,000 grant · Sep 2025

CTFtime — team 303681

Competitive CTF team

Link →

Gray Swan Arena

LLM red teaming — prompt injection, jailbreaks and agent safety

  • Global Rank #924 · 220 points · 12 unique breaks
  • 1,226 submissions in the last year
  • IPI Lucky Break — #103 of 485 · 11 breaks
  • Indirect Prompt Injection Aug 2026 — #133 of 807 · 24 breaks
  • Indirect Prompt Injection Jul 2026 — #201 of 473 · 1 break
Link →

Judgement Day — AI Red Team Arena

AIM Intelligence × Korea AISI · global AI safety competition (Apr–May 2026)

  • Global Rank #59 · 149.00 points · 399 approved submissions
  • 27 breaches · 7% breach rate
  • Epidemiological Surveillance — 35 pts · 5/23
  • Emergency Triage — 33 pts · 7/93
  • Industrial Robot — 25 pts · 6/57
  • Deepfake Detection — 16 pts · 3/34
  • Cybersecurity SOC — 14 pts · 2/45
  • Dam Flood Control — 12 pts · 2/25
  • Sports Integrity — 9 pts · 1/62
  • Aircraft Predictive Maintenance — 5 pts · 1/60
Link →

Talks & Presentations

Talk

Threat detection approaches for iOS application architecture

FUT Minna — CyberNexus Starter · 2026

Malware analysis, reverse engineering and antimalware techniques.

Talk

Wireless phishing attacks & awareness (Airgeddon)

NACSS Cybersecurity Awareness Month, Al-Amin Secondary School · 2023

Practical wireless phishing demonstration and awareness session.