CyberSecurity Analyst and Consultant

•Conducting comprehensive web application security assessments using Burp Suite for vulnerability identification and exploitation; utilizing Burp tools, Intruder and Repeater for manual and automated testing. •Web development and launch of 3 projects for clients - CCIFAMKENG, GOM, LIM. •Leveraged Cloudflare for DDoS prevention, providing strong defence against distributed denial-of-service attacks for a clients Website. •Using Wazuh for log management and vulnerability detection across endpoint applications and operating systems, serving as both a SIEM solution and Active XDR platform. •Analysed packet captures to diagnose network issues and to identify malicious activities using Wireshark. •Conducted automated vulnerability scanning and web application security testing using tools Acunetix and OpenVAS for comprehensive security scan reports. •Launched WPScan to identify vulnerabilities, outdated plugins, and misconfigurations in 2 WordPress sites. •Deployed and utilized Nuclei, Wapiti, SQLmap, Dalfox and Ghauri for web application vulnerability scanning, focusing on common web application security risks including SQLI, XSS. •Extensively reconned Bug Bounty targets on HackerOne to identify potential vulnerabilities. •Created Python script ShodanQuery for shodan credits balance checking from a shodan API. •Continuous education and professional development from online webinars from ISC2 forum, HackerNews, BrightTALK, IBM Careers and Infoblox.

Infrastructure Engineer

•Investigated and resolved errors reported on SysAid Help Desk for level 1 & 2 support and any issues found during daily Monitoring on Manage Engine, for over 400 staff. •Provided technical support and maintained local and remote user’s Computers, MS Office and other in-house software including Printer (Ysoft & MyQ), Call Centre (Avaya & Telesoft), Core Banking (Finacle) and others. •Supported and managed meeting setups on Zoom, Microsoft Teams & Cisco WebEx, for Senior Managers and staff. •Administered and issued McAfee DLP security release keys for bank staff on request. •Enforced PC security compliance standards using McAfee ePO, ensuring adherence to company policies. •Maintained and supported the network backbone, ensuring prompt resolutions of connectivity errors and managed Cisco Identity Services Engine. •Led support for dry-run and deployment of a Centralized CCTV Monitoring System on Exacq across 23 branches for the bank. •Upgraded & decommissioned more than 75 old PC’s that were running outdated windows versions below Windows 10-20H2. •Installed and maintained McAfee core Agents and McAfee Endpoint Encryption Agents, CrowdStrike EDR sensor Agents for user workstations. •Maintained 2 Data Centres according to daily, weekly, monthly checklist. •Installed, Patched and updated Windows workstations for the staff across all the 23 Branches. •Maintained and updated the Asset registry of the Banks IT Assets.

Systems Administrator

•Supported staff and resolved support tickets raised on Jira Service Desk ensuring above 80% Time-To-Response and 70% Time-To-Resolution. •Ensured optimum network security and active threat prevention using Sophos Firewall XG and Sophos captive portal for Wi-Fi authentication across 6 access points. •Established and maintained robust Systems Access Management leveraging LDAP on Windows Server. •Patched and sustained company devices across Windows and Linux platforms covering over 65 workstations, on-premise servers, and network devices, to keep them updated with the latest patches. •Successfully setup and commissioned Servers for Payment Solution Project in Safaricom Datacentre-Thika and Africa Data Centres-Mombasa Road. •Installed and maintained IT equipment including printers, POS Security tools/kits, & Access Control devices. •Configured and managed Severs (Citrix Xen Server & VMware vSphere) in the on-prem Data Centre. •Configured and maintained persistent Site-To-Site VPN connections to over 13 cross-border clients for POS-DevOps. •Administered and updated public Website for Tracom Services and Nikodigi Product. •Collaborated with procurement department in IT equipment purchasing and supply. •Trained & on boarding of over 70 new staff on in-house systems (Jira, Bitbucket, Morpho, Logidocs).

BSc in Applied Computer Science

Graduate Degree: 2nd Class - Upper Division

Cisco ROUTE 1&2

Cisco ROUTE 1.0 eLT; Cisco ROUTE 2.0

CompTIA Network+

CompTIA Network+ 2012; CompTIA Network+ N10-006

Certified Secure Computer User v2 (CSCU)

Certification Number: ECC94393484415

Certified Cyber Security Analyst

Cyber Shujaa Program (conducted by USIU-Africa / Serianu Ltd / Kenya Bankers Association)

Cisco CyberOps Associate

Certificate of Completion

Certified in Cybersecurity

Certification Number: 1500593

Google Cybersecurity Professional Certificate V2

Cybersecurity Fundamentals, Risk Management, Network Security, and the Use of industry-standard tools like Python, Linux, and SQL.