With a sharp focus on offensive security, penetration testing and cloud security, I bring over 5 years of expertise as a Cyber Security and Application Security Specialist. My passion lies in uncovering vulnerabilities, fortifying cloud infrastructures, and executing strategic penetration tests to ensure robust defense mechanisms. I thrive on the thrill of securing networks against potential threats and leveraging cloud technologies to enhance resilience.
A selection of personal projects and client builds. More on GitHub ↗
Internal
Enterprise DevSecOps Pipelines
Security built into CI/CD end to end: SCA and SAST gating the build, DAST against running environments, then infrastructure hardening and Compliance-as-Code checks before production — with every scanner's findings pushed into central vulnerability management for triage.
Internal
SSL Expiry Monitor
Tracks TLS certificate expiry across an internal enterprise estate and alerts each application owner once their certificate falls inside a 30-day window, repeating every 2 days until it is renewed. Both thresholds are configurable.
Client
Kiruh
Website design and build for an East African cybersecurity consultancy, covering services, case studies and a blog.
Client
RISQ Pro
Website development and deployment for a risk management and compliance consultancy.
Client
Research Essays Capital
Full website design and build for an academic writing services company.
Personal
Weather App
Real-time weather forecasts and a clean dashboard UI, pulling live data from the OpenWeatherMap API.
Timeline
-
Cyber Security Analyst — Red Team
Britam Holdings Financial Services
- Lead red team engagements simulating APT tactics to test enterprise defences across corporate and insurance systems.
- Conduct internal and external penetration tests on web applications, APIs, and cloud infrastructure.
- Produce executive and technical risk reports with remediation roadmaps for stakeholder review.
-
Cyber Security Engineer — Assurance Services ⇧ Promoted
CYBER1 Solutions – East & West Africa Consulting
- Delivered VAPT engagements for clients across banking, telecoms, and government sectors.
- Performed security audits aligned to ISO 27001 and CIS benchmarks, producing gap analyses and remediation plans.
- Supported pre-sales technical scoping and authored detailed security assessment proposals.
-
Cyber Security Engineer — Technical Division
CYBER1 Solutions – East & West Africa Consulting
- Deployed and configured security solutions including EDR, SIEM, and network access control for enterprise clients.
- Performed threat-hunting exercises and tuned detection rules to reduce false-positive alert rates.
- Provided Tier-2/3 incident response support, leading root-cause analysis and post-incident reviews.
-
Cybersecurity Specialist (OJT)
eKRAAL Innovation Hub Startup / Research
- Conducted vulnerability assessments on internal systems and drafted remediation reports for the engineering team.
- Researched emerging mobile and web application attack vectors as part of the hub's security R&D programme.
-
IT Officer / Systems Administrator
Kitui County Referral Hospital Government / Healthcare
- Administered Windows Server and Linux environments, managing user accounts, backups, and patch cycles.
- Designed and maintained the hospital's LAN/WAN network, reducing downtime by proactive monitoring.
- Implemented endpoint security policies and trained staff on cybersecurity awareness best practices.