Open to opportunities

Alvin Okiya

@alvinokiya

Message

Cybersecurity analyst and M365 administrator focused on secure operations, monitoring, and user enablement.

Kenya

Message

What I'm looking for

I seek a hands-on cybersecurity role emphasizing M365 administration, monitoring/SOC work, VAPT, and user enablement within a collaborative, learning-focused team.

I am a dedicated cybersecurity and IT analyst with hands-on experience in Microsoft 365 administration, blue-team monitoring, and IT infrastructure support. I lead practical security improvements while enabling users through training and clear documentation.

At e-BiasharaAfrica I implemented CIS Controls assessments, administered Exchange and M365 tenant tasks, and ran email and Ubuntu-to-OneDrive backup workflows, improving operational resilience and recoverability.

I have conducted VAPT engagements using OWASP ZAP, OpenVAS, Metasploit and led comparative POC testing for communications platforms. I also deployed and tuned Wazuh SIEM, enriched telemetry with Sysmon, and advised on monitoring improvements.

My lab work and internships include penetration testing, traffic analysis, scripting with Python and Bash, and supporting live judicial IT operations. I hold certifications including Azure Fundamentals and CIS Controls auditing, and I pursue continuous learning in cloud, DevSecOps, and red/blue team simulations.

Experience

Work history, roles, and key accomplishments

Current

IT Governance Lead

Current

Independent Consultancy

Aug 2025 - Present (1 month)

Led enterprise architecture review and developed an enterprise-wide IT governance and cybersecurity framework for an FMCG group, including gap analysis and phased implementation roadmap.

IT Governance Enterprise Architecture Cybersecurity Framework Gap Analysis Policy Development Roadmapping

Current

Jr. Cybersecurity Analyst

Current

E-BiasharaAfrica Ltd

Sep 2024 - Present (1 year)

Administered Microsoft 365 tenant, led CIS Controls assessment and implementation, and performed email/Ubuntu-to-OneDrive backup workflows while improving internal monitoring using Wazuh and Sysmon.

CIS Wazuh Sysmon Email OneDrive Backups OpenVas Vulnerability Assessment Endpoint Protection

Current

VAPT Consultant

Current

E-BiasharaAfrica Ltd

Jul 2024 - Present (1 year 2 months)

Led vulnerability assessment and penetration testing engagements for internal networks and web applications across industries, providing prioritized findings and remediation strategies to clients.

Vulnerability Assessment Penetration Testing OWASP Technical Reporting Remediation Strategies Metasploit

Cybersecurity Intern

HackSecure

Mar 2025 - Apr 2025 (1 month)

Conducted lab-based vulnerability assessments and penetration tests using nmap, gobuster, sqlmap and Wireshark; developed a Python Fernet-based file encryption/decryption tool and completed Red Team Fundamentals training.

Penetration Testing Nmap Gobuster Sqlmap Wireshark Python Red Team

Cybersecurity Intern

E-BiasharaAfrica Ltd

May 2024 - Aug 2024 (3 months)

Implemented MFA in Microsoft 365, monitored antivirus and update compliance, and supported vulnerability scanning and Microsoft Purview/eDiscovery tasks to strengthen tenant security posture.

MFA Vulnerability Discovery Microsoft Purview eDiscovery Security Monitoring

IT Intern

Judiciary - Meru Law Courts

May 2023 - Aug 2023 (3 months)

Provided first-line Windows and network support in a live judicial environment, handling antivirus updates, credential resets, printer/network issues, and supporting virtual court session setups.

Education

Degrees, certifications, and relevant coursework

Meru University of Science & Technology

Bachelor of Science, Computer Security & Forensics

Completed a Bachelor of Science in Computer Security & Forensics with coursework and projects focused on cybersecurity, digital forensics, and IT governance.