HOMERESEARCHCVEsTOOLSTALKSABOUTCONTACT
ABOUT/OFFENSIVE SECURITY CONSULTANT/MELBOURNE, AU
Adam Nurudini

Adam Nurudini

Security Consultant | AppSec & SecOps Expertise
Melbourne, Australia Available

My career has been defined by a "full-spectrum" perspective on security. I've sat on both sides of the fence — building and leading a National Bank's SOC from the ground up, and now operating as an Offensive Security Consultant at Sekuro, where I simulate the adversary to protect Australia's most critical enterprises.

10+Years Experience
14CVEs Published
10Active Certs
Get in Touch LinkedIn
qwesired@research:~
$ whoami --stats
EXPERIENCE
10+ YEARS
CVEs
14 PUBLISHED
CERTS
10 ACTIVE
ROLES
5 POSITIONS
STATUS
OPEN TO COLLABORATE
$ cat highlights.txt
  • Delivered advanced penetration testing and red team engagements across web, API, mobile, and cloud platforms
  • Built and led full-scale SOC capability for a tier-1 bank, achieving zero data breaches
  • Subject Matter Expert and service maintainer for Mobile Application Security Testing at Sekuro
  • Drove ISO 27001 and PCIDSS certifications for financial institutions
  • CVE Author with multiple critical vulnerability discoveries
$

Experience

05 ROLES
AUG 2023 - PRESENTMelbourne, AUCURRENT

Offensive Security Consultant

Sekuro
  • Subject Matter Expert and service maintainer for Mobile Application Security Testing
  • Led multiple client engagements and security assessments
  • Conducted AWS, Azure, and GCP cloud security audits
  • Performed code reviews and secure code assessments
  • Conducted device and network configuration reviews
  • Facilitated tabletop exercises for incident response readiness
  • Executed phishing engagements simulating real-world attacks
  • Performed API, web, mobile, and infrastructure testing
JAN 2022 - AUG 2023Accra, Ghana

Security Operations Centre Manager

Consolidated Bank Ghana
  • Built and led full-scale SOC with zero data breaches
  • Managed ISO 27001 and PCIDSS certification projects
  • Implemented Imperva WAF and DAM solutions
  • Designed security infrastructure for Development Bank Ghana
  • Hired and trained junior and senior SOC analysts
JUL 2019 - JAN 2022Accra, Ghana

Senior Security Engineer - Detection & Response

Consolidated Bank Ghana
  • Deployed Rapid7 InsightIDR SIEM & XDR
  • Implemented Darktrace Enterprise Immune System
  • Performed VAPT on 200+ applications
  • Implemented CyberArk PAM solution
  • Deployed KnowBe4 security awareness platform
  • Managed 3500+ endpoints and 800+ servers
JUL 2018 - JUL 2019Accra, Ghana

Senior Security Consultant (Pentest)

Netwatch Technologies
  • Led incidence response services
  • Led API and Mobile application security assessments
  • Conducted social engineering engagements
  • Performed cloud infrastructure security audits
JAN 2015 - JUL 2018Accra, Ghana

Information Security Officer

ToppCore Security
  • Performed penetration tests on web, network, and mobile apps
  • Conducted physical security assessments
  • Designed and implemented network infrastructure

Certifications

10 CREDENTIALS
CodeNameIssuerYearCredential
OSCP+OffSec Certified Professional+OffSec2025Verify
OSCPOffSec Certified ProfessionalOffSec2025Verify
eMAPTMobile Application Penetration TesterINE2025Verify
eWPTXWeb Application Penetration Tester eXtremeINE2023Verify
PNPTPractical Network Penetration TesterTCM Security2024Verify
CRTCREST Registered Penetration TesterCREST2025Verify
CPSACREST Practitioner Security AnalystCREST2025Verify
ISO 27032ISO/IEC 27032 Cybersecurity ManagerPECB2025Verify
ISO 27001ISO/IEC 27001 ImplementerPECB2024Verify
SC-900Security, Compliance, and Identity FundamentalsMicrosoft2023Verify

Expertise

PENETRATION TESTING

Internal, external, and Active Directory assessments

Phishing simulations for human security awareness

APPLICATION SECURITY

Web, mobile, and API security assessments

Application logic, authentication, and data handling

CODE REVIEW

SAST with SonarQube, Checkmarx, Semgrep

Manual review augmented with LLM agents

CLOUD SECURITY

AWS, Azure, and GCP configuration reviews

Cloud pentesting and architecture assessment

ADVERSARY SIMULATION

Adversary emulation and ransomware simulation

Testing detection and response capabilities

SECURITY OPERATIONS

SIEM, XDR, PAM, and NTA deployment

Building and leading SOC capabilities

Technologies & Tools

SIEM & XDR
Rapid7 InsightIDRMicrosoft SentinelSplunkELK Stack
Vulnerability Management
Rapid7 InsightVMNessusAcunetixNetsparker
AppSec Tools
Burp SuiteCheckmarxSonarLintMobSFObjection
Network Security
DarktraceImperva WAF & DAMPalo AltoCisco ISEFortiGate
Cloud Platforms
AWSAzureGCPCloudflare
PAM & IAM
CyberArkMicrosoft Entra
Offensive Tools
MetasploitCobalt StrikeNmapSQLMapFrida
Languages
PythonBashGoPHPJava

Research

I focus on finding real-world vulnerabilities in production software. My research has resulted in multiple CVE assignments and coordinated disclosures.

CVE-2026-82042UTMStackCRITICALCVE-2026-82041UTMStackCRITICALCVE-2026-77915rConfig CoreCRITICAL
View all CVEs
$ contact --init

Let's work together

Available for penetration testing engagements, security assessments, and consulting. Based in Melbourne, working globally.

Get in Touch