Leadership

A Message from Our CEO

A leadership perspective on why HilSec exists, how we think about security, and where we're taking the company next.

Tim Murkomen

A Message from Our CEO

"We started HilSec because too many organizations - especially across Africa - were being asked to choose between affordability and world-class protection. That shouldn't be a choice. Our mission is to bring enterprise-grade cybersecurity, delivered with the same rigor and integrity you'd expect from any global leader, to every client we serve, regardless of size or sector."

Tim Murkomen

Chief Executive Officer, HilSec

"Because someone has to keep the Internet honest."

IT Security · DevSecOps · Software Development · Risk · GRC · IT Leadership · Advocate of Tech-Driven Sustainable Development in Africa · Author

0

Published Articles

0

Research Publications

0

Research Citations

0

Professional Network

Founder & CEO, HilSec Ltd · 2020 - Present

The HilSec Journey

Five chapters of building HilSec from a single idea into a trusted regional cybersecurity partner. Scroll down to follow the road.

01 Chapter 1 of 5 The Idea
  1. The Idea

    Founded HilSec on a simple conviction: organizations shouldn't have to choose between affordability and enterprise-grade protection.

  2. Building the Foundation

    Stood up HilSec's core practice - security assessments, GRC advisory, and penetration testing - grounded in certified, hands-on expertise.

  3. Scaling Delivery

    Expanded into managed security operations and blockchain security, extending engagements to enterprise and government clients across the region.

  4. Product Innovation

    Launched ThreatRadar, SecureVault, and AutoSecComply - turning years of client engagements into reusable, AI-assisted security products.

  5. Leading What's Next

    Today, still leading from the front - pairing human expertise with intelligent automation to keep HilSec's clients a step ahead.

Our Direction

Vision & Security Philosophy

Our vision is simple to state and hard to earn: become the cybersecurity partner that governments, financial institutions, and enterprises across Africa and beyond trust by default - not because of marketing, but because of consistent, verifiable outcomes.

That means investing in our people first. Every engagement, from a single penetration test to a fully managed SOC relationship, is built on the judgment of certified practitioners - supported, not replaced, by automation and AI-assisted tooling. Technology accelerates our team; it doesn't stand in for it.

It also means growing deliberately. We would rather deepen our expertise in the services and industries we already serve well - GRC, cloud security, managed security operations, blockchain security - than spread thin chasing every emerging trend. Sustainable trust is built one well-executed engagement at a time.

Security is not a product you buy once - it's a discipline you practice continuously. At HilSec, we believe the strongest defenses come from pairing experienced human judgment with intelligent automation: people who understand adversary behavior working alongside systems that can watch, correlate, and respond faster than any manual process.

We build on a zero trust mindset - never assuming trust based on network location or a single successful login, and instead verifying identity, device posture, and context continuously. This is not a single tool, but an architectural principle we carry across every engagement, from cloud environments to legacy infrastructure.

Perhaps most importantly, we favor proactive security over reactive firefighting. Threat hunting, tabletop exercises, and continuous risk assessment matter as much as incident response, because the organizations that fare best are the ones that find their weaknesses before an adversary does.

Credentials & Recognition

A track record built on continuous learning, hands-on practice, and formal recognition from the industry.

ISC2 CC ISACA Scholar MSc IT Security & Audit First Class Honours BSc GitHub Pull Shark

Thought Leadership

Selected Publications

A selection of Tim's writing on cybersecurity, DevSecOps, GRC, and technology leadership, published on Medium. Filter by topic below.

Sep 1, 2026

The Agentic AI Security

Sep 1, 2026

The Next Decade Will Be About Who Owns Intelligence

Aug 26, 2026

From DevOps to MLOps: How AI Will Redefine Software Engineering Over the Next Five Years

Jul 27, 2026

The Next Government Needs More Than a Manifesto - It Needs an IT Governance Strategy

Jul 23, 2026

The Vulnerability You Already Know About Is the One That Will Breach You

Jul 21, 2026

The Future of African Leadership Is Digital - & IT Security Is Its Foundation

Jan 12, 2026

Why Africa Must Prepare for Post-Quantum Cybersecurity Now

Dec 12, 2025

AI Security Risks in the Digital Economy

Oct 8, 2025

The Future CTO Will Be Half Engineer-Half Economist

Oct 5, 2025

The True Cost of a Security Breach

Jun 14, 2025

Shift Left, Ship Secure: Building a Bulletproof DevSecOps Pipeline (Bitbucket + Node.js + AWS)

Aug 26, 2024

The Strategic Role of IT Governance, Risk, and Compliance (IT GRC) in Modern Enterprises

Read All Articles on Medium

Off the Record

In Tim's Own Words

"Because someone has to keep the Internet honest."

"How does this fail - and how do we prevent it? That's the most important question in DevSecOps."

"Technology feels like magic - until you realize it's just well-applied engineering, discipline, and curiosity."

"I only bite when debugging - and usually at the bug."