Felix C. Uduma

Spearheaded the design and development of an AI-powered privacy and digital exposure monitoring platform, ensuring secure-by-design principles and responsible AI use were central to every decision.

Integrated diverse breach intelligence feeds, exposure-monitoring APIs, and LLM-assisted analysis workflows to deliver automated risk visibility and contextual exposure scoring for users across multiple data sources.

Engineered AI-assisted risk scoring and intelligent summarization features leveraging large language models, directly addressing critical security challenges like prompt reliability, trust boundary enforcement, misuse prevention, and sensitive data handling.

Resolved complex AI security problems firsthand, identifying new attack surfaces introduced by LLM-powered features and implementing robust safeguards against adversarial conditions.

Directed product strategy, iterative development, and technical implementation within a fast-moving startup environment, successfully building and improving under significant resource and time constraints.

Conducted comprehensive security control assessments and cyber risk reviews across SaaS platforms and internal systems, identifying critical control gaps and mapping findings to ISO 27001 and GDPR requirements.

Investigated identity access anomalies and third-party integration risks, translating complex technical findings into clear, actionable risk outcomes for operational teams and senior leadership.

Maintained the organization's risk register and tracked remediation progress, providing consistent, evidence-based governance reporting that enhanced leadership's understanding of security posture.

Managed audit readiness efforts through structured documentation of control evidence, coordinating workflows via ServiceNow-aligned ticketing to ensure compliance and successful outcomes.

Developed and launched AI-assisted SaaS platforms to drive intelligent automation and content operations, gaining hands-on experience with LLM integration and AI-driven feature development.

Built AI-driven automation workflows supporting content generation, scheduling, and performance analytics, applying responsible AI principles to ensure reliability, operational control, and high output quality.

Led full-lifecycle product development, from concept and architecture to implementation, testing, and iteration, establishing practical experience in deploying AI capabilities within a real product environment.

Combined deep cybersecurity knowledge with AI integration expertise to proactively identify and address security considerations in automation systems, including data handling, workflow integrity, and misuse risk.

Investigated over 100 security alerts and incidents, from initial triage to documented findings and response actions, across enterprise client environments for phishing, BEC, and identity compromise.

Executed proactive threat hunting operations using MITRE ATT&CK framework, identifying threats that bypassed automated detection and strengthening overall security posture.

Analyzed network traffic, endpoint telemetry, SIEM alerts, and cloud security events to identify indicators of compromise, attacker techniques, and misconfigurations across hybrid infrastructure.

Authored structured incident reports and threat analysis summaries, ensuring clarity for client security teams and senior stakeholders by prioritizing findings and context.

Contributed to the refinement of SOC investigation playbooks and triage workflows, improving consistency and reducing response times for daily operations.

Conducted comprehensive third-party and vendor security assessments across a fintech payment ecosystem, reviewing supplier controls against ISO 27001, PCI DSS, and operational resilience requirements.

Identified critical control gaps and elevated risk areas within payment platform architecture and third-party integrations, delivering practical remediation recommendations tied to business risk.

Developed compliance documentation, control mapping exercises, and security assurance reports, providing internal teams with structured evidence for governance and audit purposes.

Managed comprehensive IT operations and security across internal systems, user accounts, and organizational infrastructure, significantly reducing day-to-day security risk.

Delivered targeted security awareness training and technical guidance to staff, emphasizing real attacker tactics and secure usage practices over generic policy compliance.

Developed and implemented internal IT procedures and security documentation covering access management, system operations, and incident handling, establishing foundational security processes where none previously existed.