Adeyemi Folarin
North York, ON
Profile
Honours BTech Cybersecurity student at Seneca Polytechnic and credited reporter on 9 public GitHub security advisories, including a cross-tenant data read in Trigger.dev and a High-severity DoS in npm toml. Builds DevSecOps CI with GitHub Actions, CodeQL and Semgrep, and automates labs with Ansible and Python. Available January - April 2027 for a 4-month co-op in Toronto/GTA.
Experience
Student Consultant, Innovation Work Integrated Learning (InnWIL)
Sep 2026 - PresentSeneca Polytechnic HELIX, Toronto, ON (Hybrid)
- Consult for Hospall with a 4-person Agile team inside a 16-student cohort.
- Frame the industry partner's challenge, compare options and deliver evidence-based recommendations.
- Plan delivery toward a written proposal and final pitch for technical and non-technical audiences.
AI Model Evaluator
Nov 2025 - Feb 2026Outlier, Remote
- Evaluated AI model outputs for factual accuracy and reasoning quality across technical tasks.
- Ran audio, visual and text QA across several projects.
- Documented findings and edge cases in structured reports.
Application Security Associate
Jan 2022 - Feb 2023Crave Daniel's Inc, Lagos, Nigeria
- Investigated 274 identity-theft, unauthorized-access and credential-abuse cases with root-cause analysis on each.
- Briefed non-technical stakeholders on findings and remediation; wrote reports for management review.
Cyber Security Intern
Dec 2020 - Dec 2021Crave Daniel's Inc, Lagos, Nigeria
- Monitored security event logs and escalated anomalous activity.
- Tracked vulnerability-scan remediation to keep systems audit-ready.
Security Research
Credited reporter, GitHub: devzephyr
npm toml GHSA-9j65-hcg3-gc64
Oct 2026High
Quadratic DoS in toml.parse() on long dotted keys; fixed in 5.0.1; shared credit. Write-up
Trigger.dev GHSA-m79r-84cc-xwg9
Oct 2026Moderate 6.5
Tenant-filter bypass in query table placeholders allowed cross-tenant data reads; fixed in 4.7.3. Write-up
FacturaScripts GHSA-grw9-xvv2-5623
Oct 2026Critical 9.9
Path traversal in SendMail attachments allowed arbitrary file read/move by employee-level users; fixed in 2026.7. Write-up
FacturaScripts GHSA-jrgg-j699-qm3h
Oct 2026High 7.5
Predictable Deploy token allowed unauthenticated plugin disable/rebuild; fixed in 2026.7; co-credited.
mcp-from-openapi GHSA-rm2m-wfw5-7wp5
Sep 2026Moderate 6.8
DNS TOCTOU bypassed the SSRF guard meant to block internal services and cloud metadata; fixed in 2.8.0. Write-up
Payload alt-text plugin GHSA-3pmw-vxv3-8vgq
Sep 2026Moderate 4.3
Health report ignored row-level read access and exposed other tenants' counts and document IDs to any logged-in user; fixed in 0.13.0. Write-up
Argos CI GHSA-28pg-v3hp-9g7f
Sep 2026Moderate 6.8
Debug logging leaked GITHUB_TOKEN, OIDC request token and ARGOS_TOKEN into CI logs; fixed in @argos-ci/core 6.8.5. Write-up
Argos CI GHSA-q9j4-4h4j-mv5m
Sep 2026Low 3.1
Unsanitized ANSI/control characters in OAuth error output; fixed in @argos-ci/cli 6.9.4.
Kimai CVE-2026-80194 / GHSA-pvc4-crg3-gj44
Aug 2026Low (GitHub), 4.3 Medium (NVD CVSS 3.1)
Missing authorization exposed data (CWE-862/200); fixed in 2.64.0. Write-up
Projects
Brampton SecOps Hackathon 2026, 3rd place
Sep 2026SupplyChek, Rogers Cybersecure Catalyst / TMU
DevSecOps CI Pipeline
GitHub Actions, CodeQL, Semgrep
- Built a pipeline that runs build and test jobs, CodeQL and Semgrep SAST, and dependency checks; surfaced the Kimai access-control bugs.
Ansible Automation Lab
Ansible, Python, Lisp, Linux
- Automated 7 hosts across 4 VLANs; wrote self-adapting playbooks in Python and Lisp that respond to the attack situation.
AI Sandbox Hosting
Railway, Docker
- Operate microVM segmentation for AI sandboxing alongside Docker services; host this blog on Vercel.
Horse Tinder API
Python, FastAPI, pytest
- Developed a REST backend with OWASP API Security Top 10 mitigations, verified by 154 pytest tests.
Azure Load Balancer
Azure (free tier)
- Set up a simple load balancer.
Detection Lab and Threat Hunting
SPR600, Winter 2026Splunk, Wazuh, Sysmon, Suricata, Elastic ML
- Configured a 4-VM lab; wrote lateral-movement and privilege-escalation rules; correlated multi-source alerts into weekly reports.
Vulnerability and Threat Analysis
RIS430, Winter 2025Windows, Linux
- Conducted authenticated scans on Windows and Linux hosts, prioritized findings by CVSS, and mapped remediation to CIS Controls and NIST CSF with a risk register.
Web Application Security Assessment
Burp Suite, OWASP ZAP
- Completed PortSwigger Web Security Academy labs on authentication, JWT, OAuth 2.0, business logic and access control; wrote a penetration testing report mapped to OWASP WSTG.
Education
Honours Bachelor of Technology (Cybersecurity)
Sep 2023 - Expected Aug 2027Seneca Polytechnic, Toronto
President's Honour List, Summer 2026.
Coursework: Attack and Defense, Application Security Methodology, Social Engineering, Ethics and Law, Web Security, Security Assessment, Detection, Security Defenses, Privacy and Confidentiality, Web Application Scripting, Vulnerability/Threat Analysis, Network Security, Intro to DFIR, Endpoint Security, Enterprise Infrastructure and Security, Basic Cryptography.
Diploma in Information Systems Management
Apr 2021 - Apr 2022Aptech Learning, Lagos, Nigeria
Project Management Ready course (PMI)
Oct 2026XperienceEd. Course completed.
Skills
AppSec and Research
- Burp Suite
- OWASP ZAP
- OWASP Top 10
- Access-control analysis
- CVSS
- Responsible disclosure
DevSecOps and CI/CD
- GitHub Actions
- CodeQL
- Semgrep
- Dependency scanning
- Git
- pytest
Detection and Response
- Splunk (SPL)
- Wazuh
- Elastic Stack
- Suricata
- Zeek
- Sigma
- Sysmon
- Microsoft Defender for Endpoint
- Velociraptor
- Wireshark
- Nmap
- MITRE ATT&CK
Vulnerability Management
- OpenVAS
- Nessus
- Qualys
Automation and Languages
- Python
- Bash
- PowerShell
- Go
- SQL
- Lisp
- Ansible
Cloud and Platforms
- Docker
- Railway
- Vercel
- Azure (free tier)
- Linux
- Windows
GRC and Process
- NIST CSF
- ISO/IEC 27001
- CIS Controls
- Risk registers
- Agile
- Jira
Activities
- MetaCTF Flash CTF, Apr 2026: 95th of 1,264 (top 7.5%)
- Cyber Café Club (CTF), Seneca, Nov 2024 - Present
- OWASP Toronto Chapter member