- Conduct comprehensive vulnerability assessments and penetration tests across enterprise networks, web applications, and APIs, identifying critical security gaps and delivering risk-ranked remediation roadmaps.
- Monitor SIEM platforms and security tooling to detect, investigate, and contain threats, minimising mean time to detect (MTTD) and respond (MTTR) across client environments.
- Develop, implement, and enforce security policies and procedures to maintain compliance with GDPR and ISO/IEC 27001 standards, reducing audit findings by ensuring continuous control alignment.
- Collaborate cross-functionally with IT and engineering teams to embed security controls that align with business objectives and reduce organisational risk exposure.
- Analyse security logs and produce executive-level reports on incident trends, vulnerability posture, and remediation progress for senior stakeholders.
- Deliver security awareness training covering phishing recognition, secure coding practices, and incident reporting protocols to 50+ staff.
Clement Mensah
Penetration Tester
Cyber Security Expert
Certified Ethical Hacker
Sys Admin
Clement Mensah
Penetration Tester
Cyber Security Expert
Certified Ethical Hacker
Sys Admin
About Me
Results-driven Cybersecurity Specialist and Penetration Tester with 5+ years of experience in vulnerability assessment, incident response, security monitoring, and ethical hacking. Proven track record conducting end-to-end penetration tests for financial institutions, insurance firms, and enterprise clients across Ghana. Hands-on expertise with SIEM platforms, AML implementation, and compliance frameworks including GDPR and ISO/IEC 27001. CEH and CHFI certified; adept at application security analysis, source code review, and translating technical findings into executive-level remediation reports.
- Phone Number: +233 55 398 9120
- Phone Number: +233 23 405 5065
- Email: clement@connectivitee.net
- Address: Ablekuma, Greater Accra, Ghana
Personal Skills
Teamwork
Collaborates effectively with diverse teams to achieve shared goals and deliver high-quality outcomes.
Time Management
Prioritizes tasks efficiently to meet deadlines and maximize productivity.
Effective Communication
Conveys ideas clearly and listens actively to ensure understanding and alignment.
Critical Thinking
Evaluates problems systematically to develop practical and innovative solutions.
Technically minded
Demonstrates a strong aptitude for understanding and working with complex technical systems.
Analytical
Excels at interpreting data and identifying patterns to inform decision-making.
Clients
Fun Facts
100+ Albumes Listened
15 Awards Won
1 000 Cups Of Coffee
50+ Games Played
KEY SKILLS AND COMPETENCIES
-
Setting up your own ethical hacking environment.
-
Creating your own Penetration Testing/ Ethical Hacking Arsenal.
-
Knowledge of Penetration Testing / Ethical Hacking Methodologies.
-
Identifying, Understanding and Manipulating web application weakness.
-
Understanding how to setup a Covenant Command and Control Server (C2).
-
Source Code Review.
-
Breaking into Multiple OS (Linux & Windows).
-
Using “out-of-the-box” techniques to execute as an Ethical Hacker/ Penetration Tester while managing time and resources.
-
Capable of writing a detailed Penetration Testing report.
-
Securing Organizational Networks.
Open Systems Interconnection (OSI) models and computer network architecture are two skill areas that includes knowledge of:
- Link-layer protocols: 3 (Ethernet/ARP), 802.1Q (VLANs), and 802.11 (Wi-Fi)
- Network-layer protocols: IP (IPv4, IPv6) and ICMP
- Transport layer protocols: TCP and UDP
- Application layer protocols: DNS, HTTP, HTTPS, DHCP, LDAP, FTP, SMTP, IMAP, POP, SSH, and Telnet, among others
Resume
Work Experience
May,2024-Present
Cybersecurity Specialist
Indigo Solutions
May,2024-Present
Penetration Tester & SOC L1
Oduma Solutions Limited
- Executed 5+ end-to-end VAPT engagements for Fido Micro Credit, Ghana Reinsurance PLC, Asa Dwaso, and Promasidor, uncovering high-severity vulnerabilities and producing CVSS-scored remediation reports.
- Implemented Anti-Money Laundering (AML) solution using NetGuardians software for the Bank of Ghana, strengthening the institution's regulatory compliance posture under Central Bank directives.
- Monitored customer infrastructure 24/7 using SIEM tooling; triaged security alerts, collected forensic data for L2 escalation, and reduced false-positive rates through refined detection rules.
- Led incident response operations for Ghana Reinsurance PLC and Regimanuel Concrete Products — containing breaches, preserving evidence, and restoring systems within agreed SLAs.
- Classified vulnerabilities including authentication flaws, injection risks (SQLi, XSS), IDOR, and business logic weaknesses, mapping findings to OWASP Top 10 and CVE databases.
January,2024-April,2024
Infrastructure Solutions Architect
iSmart Ghana International
- Design end-to-end infrastructure solutions that align with business objectives and requirements.
- Research and evaluate emerging technologies and trends in IT infrastructure, including cloud computing,virtualization,software-defined networking.
- Lead the implementation of infrastructure projects from conception to completion.
January,2023-April,2024
Penetration Tester
AIT Security Solutions (Part-Time)
- Conduct thorough security assessments and systems, networks, and applications to identify potential vulnerabilities and security weakness.
- Plan and execute simulated cyberattacks to exploit identified vulnerabilities. Create reports and recommendations from your findings, including the security issues uncovered and level of risk.
March 2021 – November, 2022
IT Manager
West Africa Auger Drilling Services
- Responsible for strategic planning and governance of the organization's IT initiatives.
- Managing the day-to-day delivery and operations of IT services within the organization
- Responsible for leading and managing IT projects from initiation to completion. This includes defining project scope, objectives, and deliverables, creating project plans and timelines, and allocating resources to ensure successful project execution.
October,2013-August,2021
Technical Specialist
Scanad Ghana Limited
- Responsible for maintenance and backup of internal development servers. Support of legacy desktop, laptops and severs
- Maintain inventory of internal licenses and track compliance Provide technical advice and assistance to office staff as needed.
- Monitor or optimize the performance, security, backup, recovery of database. Research,design and implement the appropriate technologies to support and improve corporate communications, access to information, and end-user productivity.
October,2013-August,2021
Technical Specialist
Ogilvy Ghana Limited
- Responsible for maintenance and backup of internal development servers. Support of legacy desktop, laptops and severs
- Maintain inventory of internal licenses and track compliance Provide technical advice and assistance to office staff as needed.
- Monitor or optimize the performance, security, backup, recovery of database. Research,design and implement the appropriate technologies to support and improve corporate communications, access to information, and end-user productivity
October,2015-November,2017
Technical Specialist
RedSky Ghana Limited / Squad Digital Ghana
- Responsible for maintenance and backup of internal development servers. Support of legacy desktop, laptops and severs
- Maintain inventory of internal licenses and track compliance Provide technical advice and assistance to office staff as needed.
- Monitor or optimize the performance, security, backup, recovery of database. Research,design and implement the appropriate technologies to support and improve corporate communications, access to information, and end-user productivity.
July,2010-Julyr,2013
ICT Instructor
Victoria School Complex
- Teaching Children fundamentals of computers and their uses.
September,2009-February,2010
Cafe Attendant
Splash Image Internet Cafe
ACADEMIC QUALIFICATIONS
April,2023-July,2023
Cyber Secured India (Internship)
December 2022-January 2023
Inveteck Global - Certified Ethical Hacking
January 2021–March 2021
Certificate Certified Ethical Hacking(CEH)
EC-Council University
April 2021–June 2021
Certificate Computer Hacking and Forensics Investigator
EC-Council University
June 2020–July 2020
Certificate Cybersecurity Program
Intercom Programming and Manufacturing Company Ltd (IPMC)
June 2020–July 2020
BSc Degree Information Systems Science
Regent University College of Science and Technology
Jan. 2013–July 2013
Diploma MCITP Enterprise Administrator in Windows Server 2008
Intercom Programming and Manufacturing Company Ltd (IPMC)
OTHER ONLINE TRAINING
July 2021- December 2021
Certificate Digital Marketing
Udemy
August 2021- December 2021
Certificate Cisco CCNA (200-301)
Udemy
August 2021 – December 2021
Certificate 52 Weeks of Python
DavidBombal.com
Ultimate AWS Certified Solutions Architect Associate SAA- C03
Learn Python & Ethical Hacking From Scratch
FREELANCING
October, 2021 - May, 2022
Scale-Up Africa
June,2021- May 2024
Multi-Distribution Company
November, 2021- April 2023
Crowd Reason
November, 2021 - April 2023
PrimeSec
April, 2022
Ghana Police Service Forensics Dept
Inveteck Global
ByteTime Sessions - Moderator
Additional Skills
CORE COMPETENCIES
-
Vulnerability Assessment & VAPT
-
Penetration Testing (Web, Network, API)
-
Incident Detection & Response
-
Security Monitoring & SIEM
-
Application Security & Code Review
-
Network Security — IDS/IPS, Firewalls
-
Threat Intelligence & Log Analysis
-
AML Implementation
-
Compliance: GDPR, ISO/IEC 27001
-
Security Policy Development
-
SOC L1 Operations
-
Forensic Investigation
CERTIFICATIONS
-
CEH — Certified Ethical Hacker — EC-Council
-
CHFI — Computer Hacking Forensics Investigator — EC-Council
-
CompTIA Security+ — CompTIA
-
CompTIA A+ — CompTIA
-
Practical Network Penetration Testing (PNPT) — TCM Security · 2026
-
Cisco CCNA 200-301 — Udemy
-
AWS Solutions Architect Associate (SAA-C03) — Amazon Web Services
-
Advanced Cybercrime Investigation — ICDF Academy
-
MCITP Enterprise Administrator — Windows Server 2008 — IPMC
-
Cybersecurity Program — IPMC · 2020
OPERATING SYSTEMS
-
Windows : 7,8,10,11
-
Windows Server 2008R2,2012R2,2019
-
Mac OS: Monterey, BigSur, Catalina, Mojave, High Sierra, El-Capitan.
-
Linux: SUSE(Server &Desktop), Ubuntu(Server&Desktop), Kali, RedHat,Solaris, Parrot OS
-
VM’s and NAS: VMWare Sphere esxi, Virtual Box, FreeNAS, Openmediavault, Capture The Flag (CTF)
-
Programs: tryhackme, hackthebox, echoCTF, pwnedlab, OffSec
TECHNICAL TOOLS & TECHNOLOGIES
-
SIEM / Monitoring - Splunk · Wazuh · Logpoint · SolarWinds
-
Scanning & Exploitation - Metasploit · sqlmap · Nmap · Nessus · Nikto · Dmitry
-
Web App Security - Burp Suite · Gobuster · Dirb · Dirbuster · wfuzz · ffuf · dirsearch
-
Password & Hash - Hashcat · John the Ripper
-
OSINT & Recon - Maltego · Wireshark
-
Operating Systems - Kali Linux · Parrot OS · Ubuntu · SUSE · RedHat · Windows Server 2008–2019 · macOS
-
Virtualisation - VMware vSphere ESXi · Proxmox · VirtualBox · FreeNAS
-
Scripting & Dev - Python · Perl · Bash · SQL · C++ · C# · HTML
-
Protocols- DNS · HTTP/S · DHCP · LDAP · FTP · SMTP · SSH · TCP/UDP · IPv4/IPv6
Testimonials
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Helen Floyd
Art Director
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Robert Chase
CEO
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem ipsum dolor sit amet, consectetur adipiscing elit.
John Doe
Art Director
Blog
April 28, 2020
Creativity Is More Than
Ex audire suavitate has, ei quodsi tacimates sapientem sed, pri zril ubique ut. Te cule tation munere noluisse. Enim torquatos…
Get in Touch
- Phone Number: +233 55 398 9120
- Phone Number: +233 23 405 5065
- Email: clement@connectivitee.net
- Address: Ablekuma, Greater Accra, Ghana
Contact Form