Andrew Keitany

I am the unicorn that SOC teams, DevOps pipelines, and DevSecOps strategies all need – because I speak all three languages fluently. With over five years of hands‑on experience, I don't just shift security left; I embed it into the entire software lifecycle, from code commit to cloud runtime, and from SIEM alert to incident response.

As a SOC Analyst, I have deployed and operated production‑grade Wazuh SIEM/EDR, Suricata IDS, and custom detection rules – reducing mean time to detect by analysing 1,200+ security events monthly. I’ve built active response (iptables blocking), integrated threat intelligence feeds, and written playbooks that turn alerts into automated actions.

As a DevOps Engineer, I manage multi‑cloud infrastructure (AWS, Azure, GCP) with Terraform and Ansible, orchestrate Kubernetes clusters (EKS/GKE/AKS) with Helm, and harden CI/CD pipelines (GitHub Actions, Jenkins) with SAST/DAST gates. I’ve recovered databases from failed volumes, automated systemd restarts, and cut cloud waste with Lambda stop/start routines.

As a DevSecOps practitioner, I don't just test for vulnerabilities – I teach the pipeline to reject them. I’ve integrated OWASP ZAP, GitHub code scanning, and Trivy into every pull request. I’ve conducted 120+ penetration tests on web apps, APIs, and LLM integrations, and I write reports that developers actually want to read.