CYBERSECURITY ASSURANCE PROFESSIONAL

Think like an attacker.
Build confidence.

I’m Bruce Felix. I uncover security weaknesses and turn technical findings into practical steps that protect businesses.

Penetration testing. Risk insight. Security that stands up to scrutiny.

Get in touch Explore my experience
Kenya / Cybersecurity · Consulting · Assurance
bruce@security: ~

❯ whoami

BruceFelix Macharia Mwangi
Cybersecurity Assurance Senior Associate

❯ cat expertise.yml

offensive:

Web · Mobile · API · Infrastructure

assurance:

IT audits · Risk · Compliance

toolkit:

Burp Suite · Nmap · Metasploit

frameworks:

OWASP · NIST · ISO 27001

❯ cat approach.txt

“Find the weakness.
Understand the risk.
Make the fix actionable.”

❯

A curious mind. A methodical approach.
3+ Years in cybersecurity
40+ Enterprise clients assessed
40+ Penetration testing reports
>90% Remediation acceptance

01 / ABOUT

Technical depth.
Business perspective.

I’m BruceFelix Macharia Mwangi, a cybersecurity assurance professional with experience across penetration testing, IT security audits, vulnerability assessments and risk management.

At PwC Kenya, I work with organisations in banking, telecommunications and insurance to identify high-impact vulnerabilities and strengthen critical environments. My work combines hands-on testing with a clear view of what security risk means for the business.

I believe a finding is only useful when people understand it and can act on it. That’s why reproducible evidence, clear communication and practical remediation are central to every engagement.

Offensive security

Finding the weaknesses before they become incidents. Web, mobile, API, network and infrastructure penetration testing.

VAPT Manual exploitation SAST / DAST

Assurance & governance

Connecting technical controls to business resilience through security audits, risk assessments and practical remediation.

ISO 27001 NIST CSF ITGC / COBIT

Privacy & secure design

Assessing data protection risks and embedding security and privacy into the way systems are designed.

Threat modelling Privacy by design IAM

Security consulting

Turning complex findings into clear decisions, from engagement scoping to stakeholder briefings and remediation guidance.

Risk translation Security advisory Technical reporting

02 / EXPERIENCE

Where insight becomes impact.

CURRENT ROLE

Sep 2023 — Present

PwC Kenya

Cybersecurity Assurance Senior Associate

PricewaterhouseCoopers Kenya

  • Led end-to-end penetration testing and vulnerability assessment engagements for 40+ enterprise clients across banking, telecommunications and insurance.
  • Combined automated scanning and manual exploitation across web, mobile, network and infrastructure environments, using black-box, white-box and grey-box approaches.
  • Delivered 40+ reports with reproducible evidence, business impact and risk-rated remediation guidance, achieving over 90% remediation acceptance.
  • Supported ISO/IEC 27001, NIST CSF and OWASP-aligned programmes, including certification readiness and third-party risk reviews.
  • Conducted IT general controls and cybersecurity audits covering access, change management, data integrity and disaster recovery.
Burp Suite Nessus Nmap Metasploit Mobile security

Jun 2023 — Aug 2023

Thought&Function

Quality Assurance Engineer

Designed functional and performance test cases, tracked defects with developers, and performed regression testing to protect existing functionality as products evolved.

03 / BEYOND THE ENGAGEMENT

Building stronger teams.
Shaping what’s next.

Contributing to the people, culture and future of PwC Kenya.

Aug 2025 — Present

NextGen Council Member

Representing emerging leadership, collaborating with senior partners on innovation, talent development and firm-wide strategy.

Oct 2024 — Present

Wellbeing & Culture Committee

Planning wellbeing, team-building and CSR initiatives for 100+ professionals, and coordinating community projects across departments.

04 / CREDENTIALS

A foundation for continuous learning.

CREDENTIAL / 01

Certified Ethical Hacker (CEH)

CREDENTIAL / 02

Microsoft Azure Fundamentals (AZ-900)

CREDENTIAL / 03

Microsoft Security, Compliance & Identity (SC-900)

CREDENTIAL / 04

Google IT Support Specialization

CREDENTIAL / 05

Datacom — Routing and Switching

CREDENTIAL / 06

Datacom — Network Security

Bachelor’s Degree in Computer Science

Multimedia University of Kenya · Nairobi, Kenya

CISA In progress

05 / CONTACT

Let’s talk security.

For conversations about cybersecurity assurance,
penetration testing and security consulting.