IT Risk & Compliance
Enterprise-wide vulnerability assessments across 70+ systems. ISO 27001 & NIST CSF aligned SSPs. API & mobile security testing with structured remediation workflows.
View Cybersecurity Projects
Application Security
Full security assessment of a banking mobile application. Static & dynamic analysis via MobSF, runtime instrumentation, CBC vulnerability & reverse engineering.
Explore Pen Testing Projects
Enterprise Security
Simulated enterprise AD environment with BloodHound attack path analysis. Enumeration, privilege escalation, lateral movement, and remediation strategies.
View AD Security Lab
Full-Stack Engineering
Full-stack platform at cdcommunity.org. Course management, dashboards, analytics, access control, caching & performance optimization.
View Development Projects
Security Operations
Wazuh endpoint monitoring, Security Onion IDS/IPS, Prometheus pipelines, Grafana dashboards, and Uptime Kuma service monitoring.
View Security Ops Projects
DevSecOps & AI
Locally hosted AI system using Ollama for cybersecurity workflows. Vulnerability report summarization, log analysis, documentation generation — offline & secure.
View AI & DevSecOps ProjectsPortfolio
A comprehensive portfolio of cybersecurity, penetration testing, and software development projects — specializing in banking infrastructure security, enterprise risk management, and full-stack development with integrated DevSecOps practices.
Profile
Muhammed Camara is an IT Risk & Cybersecurity Engineer with a Banking & Fintech focus, Software Developer, and Penetration Tester based in Tallinding, The Gambia. He combines advanced penetration testing expertise with full-stack software development skills to secure enterprise systems, build resilient applications, and integrate security into development lifecycles.
With hands-on experience securing banking infrastructure, performing advanced penetration testing, and integrating security into software development, Muhammed has a proven ability to reduce enterprise vulnerabilities, secure APIs and mobile applications, and align security operations with NIST, ISO 27001, and GDPR.
He has a strong background in DevSecOps, threat detection, and system architecture, with practical experience building enterprise-grade security labs, Active Directory attack simulations, and AI-assisted security workflows. Recognized for delivering high-impact, real-world security solutions across enterprise and consulting environments.
CTF & Competition Trophies
ECOWAS CTF — World Final Qualifier
International Competition · Togo · 2023
International1st Place — ECOWAS CTF National
National Hacking Competition · The Gambia · 2021
1st PlaceCore Member — Terminal Titans
Underground Hacker Team · Multiple CTF Qualifications
ActiveHacking Camp Host — GSCA
Annual community security training & research events
OrganizerHonors & Awards
ECOWAS CTF International — World Final Qualifier
International Award · Togo
1st Place — ECOWAS CTF National Hacking Competition
Domestic Award · The Gambia
Certifications
Testimonials
"Muhammed's work on our vulnerability assessment program was exceptional. He identified critical risks across our entire infrastructure and delivered actionable remediation plans that significantly strengthened our security posture. A rare combination of technical depth and clear communication."
"Working with Muhammed on our platform was a great experience. He delivered a robust full-stack system on time, with security baked in from the start. His understanding of both development and cybersecurity is impressive for someone his age."
"Muhammed's work on our vulnerability assessment program was exceptional. He identified critical risks across our entire infrastructure and delivered actionable remediation plans that significantly strengthened our security posture. A rare combination of technical depth and clear communication."
"Working with Muhammed on our platform was a great experience. He delivered a robust full-stack system on time, with security baked in from the start. His understanding of both development and cybersecurity is impressive for someone his age."
Kaddijatou Jallow
August 2026
"I highly recommend Muhammed Camara for anyone looking for reliable, professional, and knowledgeable software and cybersecurity services. Muhammed demonstrates strong technical expertise, professionalism, attention to detail, and a genuine passion for cybersecurity and technology. His ability to approach complex technical challenges with dedication and a problem-solving mindset really stands out. If you're looking for someone committed to delivering quality work while continuously learning and improving, I would definitely recommend his services."
Bloom Bank Africa
July 2025 · Banking Sector
"Muhammed brought a rare combination of deep cybersecurity expertise and practical IT risk knowledge. His work on our security posture has been exceptional — highly professional and results-driven."
CDCommunity.org
May 2025 · Ed-Tech Platform
"Delivered a robust, full-stack platform on time with security built in from day one. His understanding of both development and cybersecurity is impressive. A pleasure to work with."
Worked with Muhammed?
Your review helps others.
Kaddijatou Jallow
August 2026
"I highly recommend Muhammed Camara for anyone looking for reliable, professional, and knowledgeable software and cybersecurity services. Muhammed demonstrates strong technical expertise, professionalism, attention to detail, and a genuine passion for cybersecurity and technology. His ability to approach complex technical challenges with dedication and a problem-solving mindset really stands out. If you're looking for someone committed to delivering quality work while continuously learning and improving, I would definitely recommend his services."
Bloom Bank Africa
July 2025 · Banking Sector
"Muhammed brought a rare combination of deep cybersecurity expertise and practical IT risk knowledge. His work on our security posture has been exceptional — highly professional and results-driven."
CDCommunity.org
May 2025 · Ed-Tech Platform
"Delivered a robust, full-stack platform on time with security built in from day one. His understanding of both development and cybersecurity is impressive. A pleasure to work with."
Worked with Muhammed?
Your review helps others.
Powered by Google Reviews
Current Role: IT Risk & Cybersecurity Officer at Bloom Bank Africa Gambia Limited (Mar 2025 – Present) | Also maintaining an active consulting and software development practice via The Web Way and as a freelance penetration tester.
Research & Write-ups
Security research, CTF write-ups, and technical deep-dives spanning penetration testing, IT risk, Active Directory attacks, and DevSecOps.
Lab Walkthrough
Game of Active Directory (GOAD): The Old Gods and the New
HBO might not use the old Game of Thrones cast anymore, but we've put them to work in our AD environment. A hands-on technical deep-dive into attacking a multi-domain forest.
Read Full Walkthrough →
Knowledge Base
Open Cybersecurity Operating Model
A structured note system for connecting business risk, controls, testing, detection, remediation, and management decisions.
OSINT & Enum
Game of Thrones → GOAD: Username Discovery
Extracting GoT character data from HBO and validating them as authorized identities for a GOAD lab.
Security Research
Banking API Security: Common Vulnerabilities
Lessons from real-world API pen testing in banking — authentication flaws, IDOR, and insecure data exposure.
Lab Walkthrough
Enterprise AD Attack Lab with BloodHound
Setting up an enterprise-grade AD lab — from domain controller config to BloodHound attack path analysis.
More write-ups publishing soon — follow on GitHub or LinkedIn for updates.