Kevin✳Omondi

Portfolio ✳ Nairobi, Kenya

Portrait of Kevin Omondi
CISSP

KevinOmondi✳

Profession

Senior Software Engineer

building secure, scalable mobile and fintech systems.

What I Do

  • Mobile & Fintech Security
  • Software Engineering
  • Quality & Automation
  • Cloud, Risk & DevSecOps

Expertise

  • Mobile & fintech security
  • Backend & cloud architecture
  • Test automation & SQA
  • DevSecOps & risk
  • AI-assisted systems
failure is not an optionsecure by designmobile banking & paymentscloud · devsecops · qanairobi → worldwide

senior softwareengineer.andsecurity consultant.(based in nairobi, kenya)

Brief bio

Kevin Omondi is a CISSP-certified senior software engineer ✳ based in Nairobi, Kenya, who builds secure fintech systems for ambitious teams and has spent a decade making software people trust with their money and data.

Selected builds — 06

Work

Six highlighted projects — the problem each one solves, how it works, and the stack behind it.

  • (01)RD Analytica
  • (02)Dharura
  • (03)Optik Engine
  • (04)Hakika
  • (05)Bizzitel
  • (06)LoopyFly

About me

Kevin Omondi is a senior software engineer and certified security professional.

based in Nairobi, Kenya. building secure, scalable mobile and fintech systems. with more than 10 years of experience across web, mobile and cloud.

Kevin Omondi

About Kevin

My work sits where software architecture, mobile application security, fintech cybersecurity, DevSecOps and quality assurance meet. I help organisations design, build, test, secure and scale software that people trust with their money and data.

I also run Roots Data, where I lead product development across data, analytics and software platforms — partnering with banks, technology startups, government organisations and engineering teams.

Beyond client work, I build AI-assisted products and civic-tech platforms, and I stay deep in the security research that keeps the practice sharp: threat modelling, AI security and incident response.

  • 10+ Years of Experience
  • CISSP Certified
  • Full Stack: Web, Mobile & Cloud
  • Clients Worldwide

A decade building digital systems where failure is not an option: mobile banking, payments, cloud platforms and APIs.

Why me?

How I work

I take a security-first approach to every build. Every detail earns its place. I practice what I ship. Here's how.

(1/4)

Security from day one

Threat models before features, secure SDLC in the pipeline and CISSP-grade risk thinking from the first commit — not a pre-launch audit.

(2/4)

Systems that survive

Mobile banking and payments don't get a second chance. I design for fraud, scale and failure so your users never notice them.

(3/4)

Quality as evidence

Every release ships behind risk-based test plans and automation pipelines. Quality isn't a feeling here — it's a report your team can read.

(4/4)

Straight talk, real partnership

Clear guidance without jargon and no unnecessary complexity — just practical decisions that move the work forward.

Featured projects

Selected Projects

View All Projects
RD Analytica — screenshot 1RD Analytica — screenshot 2
01 / 06

Narrative intelligence

RD Analytica

Private intelligence environment that monitors public discourse, distils narrative pressure and prepares human-approved strategic decisions — with pluggable domain packs for politics, brand and generic operations.

  • Next.js
  • Express
  • Prisma
  • PostgreSQL
  • Tailwind CSS
  • PWA

What I do

What I Do.

(01)

Mobile & Fintech Security

  • Mobile banking security
  • Mobile threat defence
  • Digital payment protection
  • Secure authentication flows
  • Fraud-aware system design
(02)

Software Engineering

  • Backend architecture
  • Web & mobile development
  • Cloud-native systems
  • Microservices & APIs
  • Database design
  • Secure SDLC
(03)

Quality & Automation

  • Test automation strategy
  • SQA pipeline engineering
  • Regression testing systems
  • Risk-based test planning
  • Real-device test coverage
  • Continuous quality governance
(04)

Cloud, Risk & DevSecOps

  • Cloud security
  • DevSecOps transformation
  • Security architecture review
  • Vulnerability management
  • Incident response
  • Compliance readiness

Technologies — 47

Official brand logos

Languages and frameworks

Python
Django
Flask
JavaScript
TypeScript
Node.js
React
Next.js
Ruby on Rails
C#

Mobile, cloud and data

Android
iOS
Flutter
Docker
AWS
Microsoft Azure
Google Cloud
PostgreSQL
MySQL
MongoDB
GitHub Actions

Testing and security tooling

Selenium
Cypress
Cucumber
Appium
Jest
Mocha
Puppeteer
Postman
BrowserStack
Sauce Labs
Firebase Test Lab
Jira

AI engineering

OpenAI
LangChain
Hugging Face
PyTorch
MLflow
Ollama

Cybersecurity

Splunk
Elasticsearch
Wireshark
Kali Linux
Burp Suite
SonarQube
Cloudflare
Okta

Skills mastered

AI & cybersecurity disciplines

AI engineering

  • MLOps
  • LLM fine-tuning
  • AI security
  • Vector databases
  • Multimodal AI

Cybersecurity

  • Threat modelling
  • Incident response
  • Vulnerability management
  • SIEM & SOAR
  • Detection engineering
  • Threat hunting
  • MITRE ATT&CK
  • Zero Trust
  • Identity & access management
  • Cloud security
  • DevSecOps & secure SDLC
  • OWASP Top 10
  • NIST CSF
  • PCI DSS
  • ISO 27001
  • Risk assessment
  • Mobile threat defence

Experience

Built, led,
advised.

01

Founder and CEO

Roots Data (RD Analytica)

Lead a software and data company focused on app development, campaign intelligence, narrative analytics and civic technology platforms, from architecture to delivery.

02

Founder and CEO

Pesawave

Lead product and engineering for a fintech venture.

03

Senior Software Engineer and Security Consultant

Enterprises, financial institutions and startups

Advise and build for banks, technology startups, government organisations and engineering teams. Most of this work is delivered in private client repositories under confidentiality agreements.

AI and intelligent systems

AI Where It Earns Its Place

I use AI where it earns its place: faster delivery, sharper analysis, safer systems.

From narrative intelligence platforms to AI-assisted engineering and testing, always built with security first.

Applied AI products

LLM-powered features in web and mobile apps, retrieval and workflow automation, chat and assistant interfaces.

Narrative & data intelligence

Analysis of public narratives for decision support, dashboards with command-level visibility, prediction and forecasting platforms.

AI-assisted engineering

Code review and test generation, faster risk-based QA cycles and automated release checks.

Secure & responsible AI

Threat modelling for AI features, data protection and guardrails, compliance-ready fintech use cases.

  • LLM APIs
  • Prompt engineering
  • RAG
  • NLP
  • AI agents
  • Python
  • Model evaluation

0+

Years experience

In the software engineering field.

0+

Featured projects

Documented on this site.

0

Technologies

Across web, mobile, cloud, AI and security.

10+ yearsSoftware engineering
CISSPCertified security professional
Full stackWeb, mobile and cloud
NairobiWorking with teams worldwide

Contact ✳ Open to work

Let’s start something great together.

Have a project in mind? I’d love to hear about it. Let’s create something secure, scalable and lasting.

certified · cissp