Junior cybersecurity engineer building SOC operations, incident response, and threat intelligence expertise through hands-on labs and projects.
BSc Cybersecurity & Digital Forensics (Open University of Kenya, expected 2027)
Junior cybersecurity practitioner focused on SOC operations, incident response, and GRC. Building hands-on experience through penetration testing labs, security tool development, and enterprise defense projects. Currently targeting roles in threat detection, compliance automation, and security architecture.
Core competencies across defensive operations, offensive testing, and compliance frameworks.
8 core projects demonstrating SOC operations, incident response, threat intelligence, and compliance expertise.
Real-time threat detection and log aggregation for SOC operations. Integrated with Elasticsearch, MITRE ATT&CK mapping, automated alert correlation, and compliance scoring (GDPR, HIPAA, PCI-DSS). Production-ready deployment for enterprise security monitoring.
Interactive training platform for SOC analysts with realistic multi-stage incidents. Covers detection, triage, containment, eradication, recovery. Hands-on incident response procedure validation with performance metrics and playbook alignment.
Enterprise compliance and audit framework for multi-standard validation (GDPR, HIPAA, PCI-DSS, ISO27001, CIS). Automated control validation, evidence collection, audit trail tracking, and executive compliance dashboards.
Governance, risk, and compliance framework for enterprise risk assessment and management. Risk scoring, control mapping, asset inventory, vulnerability correlation, and executive risk dashboards for C-suite reporting.
ML-powered email phishing classifier using ensemble models (Random Forest, SVM, Neural Networks). NLP feature extraction, email header analysis, SPF/DKIM/DMARC validation, threat intelligence integration, and active learning from analyst feedback.
Linux disk and memory forensics lab with Volatility and Sleuthkit. Chain of custody procedures, evidence integrity validation, artifact extraction, timeline reconstruction, Kenya Cybercrime Act alignment. Hands-on forensic analysis procedures.
Automated OWASP Top 10 vulnerability scanner for web applications. SQL injection, XSS, CSRF, authentication bypass detection. Manual verification techniques, remediation guidance, CI/CD pipeline integration, comprehensive HTML/PDF reporting.
STRIDE and PASTA threat modeling tool with data flow diagram builder. Risk assessment matrix, threat tree generation, control recommendations, architecture review templates. Security-by-design validation for enterprise applications.
Deep case studies of 8 production-grade security projects with detailed methodology and business impact analysis.
Enterprise-grade SIEM with real-time threat detection, log aggregation, compliance automation (GDPR/HIPAA/PCI-DSS), and automated incident response.
Interactive SOC training platform with multi-stage APT scenarios, decision trees, and performance metrics. MITRE ATT&CK aligned with real-world incident progression.
Multi-framework compliance automation supporting GDPR, HIPAA, PCI-DSS, ISO27001. Automated control validation, evidence collection, and executive reporting.
Enterprise risk quantification with asset inventory, vulnerability correlation, risk scoring, and control mapping. Executive dashboards for risk prioritization and board reporting.
ML ensemble (Random Forest + SVM + Neural Network) for email threat detection. with NLP feature extraction, URL analysis, and active learning feedback loops.
Linux disk and memory forensics with Volatility and Sleuthkit. Chain of custody, artifact extraction, and timeline reconstruction aligned to Kenya Cybercrime Act.
OWASP Top 10 automated scanning with manual verification. Vulnerability prioritization (CVSS scoring), remediation guidance, and professional reporting for penetration testing engagements.
STRIDE/PASTA threat modeling tool with DFD builder, risk assessment matrices, and architecture review. Compliance framework mapping for security-by-design.
25 additional security labs organized by category. Filter by area of focus.
Network mapping, host discovery, service enumeration.
Payload generation, vulnerability exploitation, privilege escalation.
Phishing campaigns, pretext calls, physical security testing.
WPA2/WPA3 cracking, rogue AP detection, wireless threats.
Proxy interception, SQL injection, XSS, CSRF testing.
Kerberoasting, LDAP injection, privilege escalation.
Fragmentation, obfuscation, detection bypass techniques.
Process monitoring, file integrity, behavioral analysis.
Syslog, JSON parsing, timeline reconstruction.
Runbook automation, incident response workflows.
Data ingestion, searching, alerting, dashboards.
Rule optimization, false positive reduction, MITRE mapping.
Logstash, data normalization, retention policies.
Open source intelligence gathering, threat feeds, TTPs.
Email headers, infrastructure mapping, attribution.
Binary analysis, behavior analysis, IOC extraction.
Hash identification, wordlist optimization, GPU acceleration.
Rule writing, packet analysis, detection validation.
Packet capture, protocol analysis, anomaly detection.
Scan configuration, result analysis, remediation tracking.
CIS benchmarks, system hardening, configuration compliance.
ISMS setup, control selection, compliance documentation.
Risk identification, likelihood/impact scoring, mitigation planning.
Scanning automation, prioritization, SLA tracking.
Simulated attack campaign, defense evaluation, improvement roadmap.
Additional documentation, reports, and guides:
Professional resume with skills, experience, education, and portfolio highlights.
Download PDFCompleted levels from the BLEND / ARKX AI Agent Red-Team practical assessment.
View completions