Skip to main content

Adeyemi Folarin

North York, ON

Profile

Honours BTech Cybersecurity student at Seneca Polytechnic and credited reporter on 9 public GitHub security advisories, including a cross-tenant data read in Trigger.dev and a High-severity DoS in npm toml. Builds DevSecOps CI with GitHub Actions, CodeQL and Semgrep, and automates labs with Ansible and Python. Available January - April 2027 for a 4-month co-op in Toronto/GTA.

Experience

Student Consultant, Innovation Work Integrated Learning (InnWIL)

Sep 2026 - Present

Seneca Polytechnic HELIX, Toronto, ON (Hybrid)

  • Consult for Hospall with a 4-person Agile team inside a 16-student cohort.
  • Frame the industry partner's challenge, compare options and deliver evidence-based recommendations.
  • Plan delivery toward a written proposal and final pitch for technical and non-technical audiences.

AI Model Evaluator

Nov 2025 - Feb 2026

Outlier, Remote

  • Evaluated AI model outputs for factual accuracy and reasoning quality across technical tasks.
  • Ran audio, visual and text QA across several projects.
  • Documented findings and edge cases in structured reports.

Application Security Associate

Jan 2022 - Feb 2023

Crave Daniel's Inc, Lagos, Nigeria

  • Investigated 274 identity-theft, unauthorized-access and credential-abuse cases with root-cause analysis on each.
  • Briefed non-technical stakeholders on findings and remediation; wrote reports for management review.

Cyber Security Intern

Dec 2020 - Dec 2021

Crave Daniel's Inc, Lagos, Nigeria

  • Monitored security event logs and escalated anomalous activity.
  • Tracked vulnerability-scan remediation to keep systems audit-ready.

Security Research

Credited reporter, GitHub: devzephyr

npm toml GHSA-9j65-hcg3-gc64

Oct 2026

High

Quadratic DoS in toml.parse() on long dotted keys; fixed in 5.0.1; shared credit. Write-up

Trigger.dev GHSA-m79r-84cc-xwg9

Oct 2026

Moderate 6.5

Tenant-filter bypass in query table placeholders allowed cross-tenant data reads; fixed in 4.7.3. Write-up

FacturaScripts GHSA-grw9-xvv2-5623

Oct 2026

Critical 9.9

Path traversal in SendMail attachments allowed arbitrary file read/move by employee-level users; fixed in 2026.7. Write-up

FacturaScripts GHSA-jrgg-j699-qm3h

Oct 2026

High 7.5

Predictable Deploy token allowed unauthenticated plugin disable/rebuild; fixed in 2026.7; co-credited.

mcp-from-openapi GHSA-rm2m-wfw5-7wp5

Sep 2026

Moderate 6.8

DNS TOCTOU bypassed the SSRF guard meant to block internal services and cloud metadata; fixed in 2.8.0. Write-up

Payload alt-text plugin GHSA-3pmw-vxv3-8vgq

Sep 2026

Moderate 4.3

Health report ignored row-level read access and exposed other tenants' counts and document IDs to any logged-in user; fixed in 0.13.0. Write-up

Argos CI GHSA-28pg-v3hp-9g7f

Sep 2026

Moderate 6.8

Debug logging leaked GITHUB_TOKEN, OIDC request token and ARGOS_TOKEN into CI logs; fixed in @argos-ci/core 6.8.5. Write-up

Argos CI GHSA-q9j4-4h4j-mv5m

Sep 2026

Low 3.1

Unsanitized ANSI/control characters in OAuth error output; fixed in @argos-ci/cli 6.9.4.

Kimai CVE-2026-80194 / GHSA-pvc4-crg3-gj44

Aug 2026

Low (GitHub), 4.3 Medium (NVD CVSS 3.1)

Missing authorization exposed data (CWE-862/200); fixed in 2.64.0. Write-up

Projects

Brampton SecOps Hackathon 2026, 3rd place

Sep 2026

SupplyChek, Rogers Cybersecure Catalyst / TMU

DevSecOps CI Pipeline

GitHub Actions, CodeQL, Semgrep

  • Built a pipeline that runs build and test jobs, CodeQL and Semgrep SAST, and dependency checks; surfaced the Kimai access-control bugs.

Ansible Automation Lab

Ansible, Python, Lisp, Linux

  • Automated 7 hosts across 4 VLANs; wrote self-adapting playbooks in Python and Lisp that respond to the attack situation.

AI Sandbox Hosting

Railway, Docker

  • Operate microVM segmentation for AI sandboxing alongside Docker services; host this blog on Vercel.

Horse Tinder API

Python, FastAPI, pytest

  • Developed a REST backend with OWASP API Security Top 10 mitigations, verified by 154 pytest tests.

Azure Load Balancer

Azure (free tier)

  • Set up a simple load balancer.

Detection Lab and Threat Hunting

SPR600, Winter 2026

Splunk, Wazuh, Sysmon, Suricata, Elastic ML

  • Configured a 4-VM lab; wrote lateral-movement and privilege-escalation rules; correlated multi-source alerts into weekly reports.

Vulnerability and Threat Analysis

RIS430, Winter 2025

Windows, Linux

  • Conducted authenticated scans on Windows and Linux hosts, prioritized findings by CVSS, and mapped remediation to CIS Controls and NIST CSF with a risk register.

Web Application Security Assessment

Burp Suite, OWASP ZAP

  • Completed PortSwigger Web Security Academy labs on authentication, JWT, OAuth 2.0, business logic and access control; wrote a penetration testing report mapped to OWASP WSTG.

Education

Honours Bachelor of Technology (Cybersecurity)

Sep 2023 - Expected Aug 2027

Seneca Polytechnic, Toronto

President's Honour List, Summer 2026.

Coursework: Attack and Defense, Application Security Methodology, Social Engineering, Ethics and Law, Web Security, Security Assessment, Detection, Security Defenses, Privacy and Confidentiality, Web Application Scripting, Vulnerability/Threat Analysis, Network Security, Intro to DFIR, Endpoint Security, Enterprise Infrastructure and Security, Basic Cryptography.

Diploma in Information Systems Management

Apr 2021 - Apr 2022

Aptech Learning, Lagos, Nigeria

Project Management Ready course (PMI)

Oct 2026

XperienceEd. Course completed.

Skills

AppSec and Research

  • Burp Suite
  • OWASP ZAP
  • OWASP Top 10
  • Access-control analysis
  • CVSS
  • Responsible disclosure

DevSecOps and CI/CD

  • GitHub Actions
  • CodeQL
  • Semgrep
  • Dependency scanning
  • Git
  • pytest

Detection and Response

  • Splunk (SPL)
  • Wazuh
  • Elastic Stack
  • Suricata
  • Zeek
  • Sigma
  • Sysmon
  • Microsoft Defender for Endpoint
  • Velociraptor
  • Wireshark
  • Nmap
  • MITRE ATT&CK

Vulnerability Management

  • OpenVAS
  • Nessus
  • Qualys

Automation and Languages

  • Python
  • Bash
  • PowerShell
  • Go
  • SQL
  • Lisp
  • Ansible

Cloud and Platforms

  • Docker
  • Railway
  • Vercel
  • Azure (free tier)
  • Linux
  • Windows

GRC and Process

  • NIST CSF
  • ISO/IEC 27001
  • CIS Controls
  • Risk registers
  • Agile
  • Jira

Activities

  • MetaCTF Flash CTF, Apr 2026: 95th of 1,264 (top 7.5%)
  • Cyber Café Club (CTF), Seneca, Nov 2024 - Present
  • OWASP Toronto Chapter member