INIT ▶ SECURITY SESSION

Access Granted_

/secure/session

            
          

01. About Me

I'm a security consultant with extensive experience helping organizations harden networks, applications, and cloud workloads against real‑world adversaries. My work blends offensive testing with pragmatic defense—threat modeling, secure architecture, and measurable risk reduction.

I'm currently pursuing an M.S. in Computer Science at Stanford, concentrating in Computer Networks and Security.I also serve as Co‑President of the Computer Science Student Council at Stanford. I'm also exploring AI red teaming—systematically probing models and agentic systems to surface novel risks, jailbreaks, prompt‑injection paths, data‑exfiltration vectors, and model‑supply‑chain weaknesses before they're exploited.

Core strengths:

Segmentation, hardening, zero‑trust, cloud posture. Secure SDLC, application and API security, mobile and web, vulnerability remediation. Security architecture reviews and threat modeling reducing risk. Adversary emulation, penetration testing, and vulnerability validation to uplift controls. Governance, risk and compliance with developer-friendly guardrails and automation. AI red teaming: prompt injection, jailbreaks, model abuse and emergent risk surfacing.
Hover or focus a capability to see details.
Headshot: Ray

Professional Experience

Senior Cyber Risk Consultant @ Deloitte Nov 2021 — Aug 2024

At Deloitte, I led security architecture reviews across web, mobile, cloud, and enterprise networks and partnered with DevOps to bake security into CI/CD. I built automation to map API and cloud attack surfaces, delivered penetration testing and network assessments aligned to NIST/COBIT/ASVS, and drove security audits and risk assessments alongside ISO 27001/22301/PCI DSS and SOC reporting—elevating security posture and compliance readiness.

ArchitectureVuln MgmtPen testingPCI DSSISO 27001

Education

  1. 2025
    M.S. in Computer Science @ Stanford University 2024 — Present

    Concentration

    Computer Networks & Security

  2. 2017
    B.S. in Computer Engineering @ KNUST 2017 — 2021

    Honors

    First Class Degree

Research Experience

Graduate Research Assistant @ Stanford — Empirical Security Research Group (ESRG)
Oct 2024 — Present

At Stanford's ESRG, I'm engaged in a systematic analysis of government issued enterprise‑security guidance across 41 countries, measuring availability, coverage, and cross‑country consistency. We derive coverage density and consensus scores to define "essential" guidance and help organizations prioritize controls for multinational compliance, based on our security taxonomy.

Comparative PolicyMetricsTaxonomyGovernanceEnterprise Security

Publications

  1. A First Look at Governments' Enterprise Security Guidance
    Kimberly Ruth, Raymond Buernor Obu, Ifeoluwa Shode, Gavin Li, Carrie Gates, Grant Ho, Zakir Durumeric
    USENIX Security Symposium, August 2025
    PDF

Selected Projects

Screenshot: Sentinel Dashboard
Open Source

Multi‑LLM Workbench

Parallel local LLM microservices with one unified UI.

DockerOllamaLLMMicroservices
Screenshot: Audit tooling
Open Source

Local LLM Stack

Drop‑in two‑container template to self‑host any Ollama model.

DockerOllamaLLM

Leadership & Volunteering

Co-President

@ Stanford Computer Science Student Council
2025 — 2026
Student Gov

President

@ KNUST Association of Computer Engineering Students
2021 — 2022
Student Gov

Undergraduate Representative

@ KNUST Comp & Elec. Faculty Board
2020 — 2021
Student Gov

Co-founder

@ African Cyber Experience
2023 — Present
Non-Profit

Student Information Security Consultant

@ Stanford Security Clinic
2024 — Present
Volunteering

Let's Build Something Secure

Open to collaborations, security reviews, and speaking. If you've got an idea worth hardening, let's make it real.

Email me Resume