At TMF, I investigate and respond to security incidents across 4,000+ endpoints. I engineer custom Microsoft Defender detections and use KQL threat-hunting queries to uncover threats that bypass automated controls.
I also lead incident response activities, conducting forensic investigations and preparing evidence packages and reports for escalation and stakeholder review. I automate recurring workflows with Microsoft Sentinel SOAR playbooks and maintain response runbooks aligned with NIST 800-61.
Previously, at CyberSOC Africa, I delivered managed security services across 22 client organizations. I tuned SIEM detection logic, performed vulnerability assessments, and translated technical findings into business risk insights.

