Hi, I am
WELLINGTON MUKAHIWA
Cybersecurity Specialist | iOS Developer | Full-Stack Engineer
Cybersecurity major at Walsh University (GPA 3.89) with hands-on experience in penetration testing, incident response, secure web development, and cloud infrastructure. I build production systems, break into test environments, and ship full-stack applications — all with security at the core.
About Me
Background
Currently pursuing my Bachelor's in Cybersecurity at Walsh University with a stellar GPA of 3.89. Previously studied at Notre Dame College with a 3.9 GPA before transferring, and graduated from Riverton Academy in Zimbabwe where I focused on Computer Science and Mathematics.
Professional Focus
I work across the full stack — from PHP/MySQL backends to React frontends — while applying security thinking at every layer. At Kontrol Tekniks International, I increased web traffic by 60% through SEO optimization while hardening the platform against common attack vectors.
Expertise
On the offensive side, I use Kali Linux, Metasploit, Nmap, and custom Python scripts for penetration testing and vulnerability scanning. On the defensive side, I build secure authentication systems (Microsoft Entra ID, OAuth 2.0, 2FA), conduct incident response, and harden server infrastructure. I've responded to real breaches, analyzed forensic evidence, and shipped the fixes.
Achievements
- Presented AI research at Walsh University International AI Conference.
- Built and deployed 5+ production web applications with PHP, MySQL, and admin panels.
- Responded to real-world security incidents — identified PHP shells, backdoors, and attacker trails.
- Integrated Microsoft Entra ID and OAuth 2.0 for enterprise-grade authentication systems.
- Engineered a home lab with Pi-hole DNS filtering, Apache web server, and local AI inference.
- Configured SPF, DKIM, DMARC, and MX records to restore email deliverability and prevent spoofing.
- Earned AWS Certified Cloud Practitioner certification.
Core Technologies
iOS / Mobile
- Swift & SwiftUI
- SwiftData & CoreData
- HomeKit & WidgetKit
- 5 Apps Shipped to App Store
Frontend
- HTML5 & CSS3
- JavaScript (ES6+)
- React
- Tailwind CSS
Backend
- PHP
- Python
- MySQL
- RESTful APIs
Security
- Penetration Testing
- Incident Response
- Network Security
- Digital Forensics
- SIEM & Log Analysis
Tools & Others
- Git & CI/CD
- Azure
- AWS & Cloud
- Identity and Access Management
- Linux
- Windows Server Administration
- Command Line
Certifications & Training
- AWS Certified Cloud Practitioner 04/26/2025
Professional Journey
Sentinel IDS – Intrusion Detection System
2025 - PresentSecurity Engineer & Developer
- Designed and deployed a custom IDS monitoring 2 servers across a home lab
- Built Express 5 + TypeScript API with React 19 dashboard, deployed via Docker Compose
- Developed Python agent reporting file integrity, process anomalies, and network connections
- Integrated ClamAV, rkhunter, chkrootkit, and Lynis with scheduled weekly scans
- Built Telegram alerts for real-time threat notifications and 6-hour security digests
- Implemented threat intelligence with AbuseIPDB and risk scoring (A-F grades)
Technologies:
- TypeScript
- Express
- React
- Python
- Docker
- PostgreSQL
Authentik – Enterprise Identity Server
2025 - PresentIdentity & Access Management Engineer
- Deployed Authentik SSO/LDAP/RADIUS identity provider on Raspberry Pi 5
- Configured LDAP outpost enabling centralized SSH login across 3 Linux servers
- Set up RADIUS authentication for managed network switch access control
- Managed 7 Docker containers and performed major version upgrades with manual DB migrations
Technologies:
- Authentik
- Docker
- LDAP
- RADIUS
- PostgreSQL
BreachScope – Cybersecurity Tool
2025 - PresentCybersecurity Engineer & Researcher
- Developed GitHub-hosted vulnerability scanning and analysis platform
- Built automated workflows for file scanning, API-based security checks, and report generation
- Researched server exploitation including shells, unauthorized access, and PHP injection methods
- Produced detailed forensic and incident-response documentation
- Integrated Bash, Python, Nmap, Gobuster, curl, and Metasploit in scanning routines
- Created automated log analysis pipeline to detect high-risk behaviors
Technologies:
- Kali Linux
- Python
- Bash
- Metasploit
- Nmap
- GitHub
Cybersecurity Coursework Projects
2023 - PresentCybersecurity Student & Analyst
- Linux & Networking: Bash aliases, SSH configuration, GNS3 router topology, VPCS, scanning & subnetting
- Forensics: Mac malware detection, APFS analysis, metadata inspection, terminal-based threat hunting
- Offensive Tools: Performed password cracking (Hydra, John, Hashcat), exploited IP cameras using Metasploit
- Documented penetration testing workflows for academic and lab reports
Technologies:
- Kali Linux
- Bash
- Metasploit
- Nmap
- Python
Small Business Cyber Risk Assessment Research
2024 - PresentCybersecurity Researcher
- Researched cyber risk frameworks, scoring methodologies, and assessment metrics
- Developed structured approach for offering Cyber Risk Assessments as a service
- Documented tools, procedures, templates, and reporting formats for client use
Technologies:
- NIST Frameworks
- Kali Linux
- Python
- Documentation Tools
RunMe.Tech Security Incident Response
2025Security Analyst
- Investigated multi-stage compromise of the RunMe.Tech system
- Identified malicious PHP shells, encoded payloads, and hidden backdoors
- Analyzed SQL logs, access logs, and IP trails to reconstruct attacker behavior
- Created full forensic report detailing attack root cause and damage assessment
- Published cybersecurity awareness post summarizing findings and prevention
Technologies:
- Linux
- PHP
- MySQL
- Bash
- Log Analysis Tools
Raspberry Pi – Pi-hole Network Security
2025 - PresentNetwork Security Engineer
- Implemented Pi-hole as a local DNS sinkhole for ad-blocking and device-level tracking protection
- Configured custom blocklists to prevent malicious sites, phishing domains, and telemetry tracking
- Integrated Pi-hole with home router DHCP for system-wide protection
- Reduced bandwidth usage and improved browsing speed across all connected devices
- Set up admin panel and monitoring tools for real-time analysis of network traffic
Technologies:
- Raspberry Pi
- Pi-hole
- DNS Filtering
- Linux Networking
- Firewall Rules
LearnItTogether.org – Security Incident Response
2024Cybersecurity Analyst
- Investigated abnormal behavior on the LearnItTogether.org WordPress platform
- Detected unauthorized admin logins, plugin misconfigurations, and suspicious file injections
- Analyzed server logs, PHP error logs, and access attempts to identify root cause
- Patched vulnerabilities in the Amelia plugin and removed malicious/unused plugins
- Reconfigured DNS, SMTP, SPF, DMARC, and DKIM settings to restore secure email delivery
- Implemented hardened file permissions, removed unsafe code, and tightened security policies
- Documented the entire incident response workflow for future prevention and auditing
Technologies:
- Linux
- WordPress Security
- DNS / DMARC / DKIM
- PHP
- Log Analysis
Mail Server – Security Incident Response & Hardening
2024 - PresentSecurity Engineer
- Responded to security issues involving misconfigured mail records leading to spoofing and delivery failures
- Secured the mail server by correcting SPF, DKIM, DMARC, and MX configurations
- Traced SMTP errors, failed handshakes, bounced emails, and unauthorized sending attempts
- Identified potential phishing vectors and blocked malicious IPs interacting with the server
- Rebuilt mail authentication pipeline to ensure domain identity integrity across all inbox providers
- Implemented monitoring for SMTP logs, DKIM failures, and DMARC reports
- Restored full email deliverability and strengthened the overall email security posture
Technologies:
- DNS Security
- SMTP
- SPF / DKIM / DMARC
- Email Forensics
- Linux
Raspberry Pi – Local AI Server
2025 - PresentAI Systems Engineer
- Deployed a Raspberry Pi as a dedicated AI inference server running WebUI interfaces
- Integrated APIs for Anthropic, Grok, OpenAI, and local LLM models for unified local experimentation
- Configured GPU/CPU optimization, quantized models, and background services for fast responses
- Enabled secure LAN-based AI access for devices within the home network
- Used the setup as a research environment for autonomous agents and privacy-preserving AI workflows
Technologies:
- Raspberry Pi 5
- WebUI
- Ollama
- Anthropic / Grok / OpenAI APIs
- Python
- Linux Systemd Services
Local LLM Infrastructure & AI Research
2024 - PresentAI Researcher – Autonomous Agents & Forensic AI
- Ran local LLMs using Ollama to build privacy-first AI systems
- Developed autonomous agents capable of cybersecurity analysis and decision automation
- Taught model fine-tuning, architecture, and hardware optimization strategies
- Presented at international Walsh University AI Conference
- Designed demos, slides, and examples for students and researchers
- Created real use cases in digital forensics and healthcare diagnostics
Technologies:
- Ollama
- Python
- LLM APIs
- Linux
Raspberry Pi – Apache Web Server Deployment
2025 - PresentSystems Engineer & Linux Administrator
- Configured a Raspberry Pi as a fully functional Apache web server for hosting internal web applications
- Set up secure file structure, virtual hosts, SSL, and firewall rules for safe LAN and WAN access
- Optimized server performance using caching, PHP configurations, and lightweight modules
- Used the Pi as a testing environment for PHP, MySQL, and other backend services before production deployment
- Built a stable, low-power, always-online home server solution
Technologies:
- Raspberry Pi OS
- Apache
- PHP
- Linux
- MySQL
KTZ Quotes/Invoice PWA
2024 - PresentFull-Stack Developer
- Developed full PWA for generating invoices and quotations offline
- Integrated service workers and manifest.json for installation support
- Built admin panel with user management and secure authentication
- Implemented cloud sync features for cross-device functionality
- Strengthened all backend endpoints with sanitization and XSS protection
Technologies:
- PHP
- JavaScript
- MySQL
- PWA
Golden Egg Retail Platform
2024Project Planner
- Planned full e-commerce platform for egg retailing in 36-egg sections
- Developed branding strategy, hosting setup, and UI layout concepts
- Created initial database schema and product page structures
- Designed complete customer shopping flow for future development
Technologies:
- PHP
- MySQL
- HTML/CSS
Cathy's Quotes/Invoice
2024Full-Stack Developer
- Built installable cross-platform invoice and quotation PWA
- Designed Tailwind UI for clean and professional user experience
- Implemented PDF-ready template system for printing and exporting
Technologies:
- PHP
- Tailwind CSS
- JavaScript
X-Card – Digital Business Cards
2023Developer
- Built NFC-style digital business card generator
- Created HTML/CSS/PHP interface for instant card generation
- Added dynamic link generation and shareable profile pages
Technologies:
- PHP
- HTML/CSS
Walsh University Data Systems
2024Student Developer
- Integrated Microsoft Entra ID authentication into internal data systems
- Built secure login flow and multi-sheet dataset viewer
- Improved reliability of access logic and frontend structure
Technologies:
- React
- JavaScript
- Microsoft Entra
High School Learning Management System
2024System Architect – LMS Blueprint
- Designed a complete LMS system architecture for PHP + MySQL implementation
- Included homework uploads, teacher dashboards, assignment scheduling, and exam management
- Added grade tracking, class-level administrative oversight, and student progress viewing
Technologies:
- PHP
- MySQL
- HTML/CSS
Selected Projects
Shipped apps, live platforms, and production systems
Get In Touch
Currently seeking opportunities in cybersecurity and full-stack development. Let's discuss how my expertise in secure development and digital growth can benefit your organization.
"Wellington has continually impressed with his cybersecurity acumen, secure web systems, and SEO insight. He's the kind of detail-oriented developer who blends technical skill with strategic vision."- Dr. Daniel Passerini, Executive Director of Cross-Enterprise Operations, Walsh University