Open to opportunities

Hosea Kosgei

@hoseakosgei

Message

High-impact Security Analyst specializing in incident response, SIEM, and EDR management.

Kenya

Message

What I'm looking for

I’m looking for a SOC/incident-response role where I can automate workflows, tune SIEM/EDR detections, reduce false positives, and improve cloud and data security visibility.

I’m a Security Analyst with over 3 years of experience in SOC Operations, focused on incident response, threat detection, and containment. I work across SIEM and EDR sources to triage high-priority security events and strengthen visibility for modern enterprise infrastructure.

I automate security workflows and tune detection logic to reduce false positives while improving alert quality. In my roles, I document findings, lead root cause analysis, and harden security posture using clear SOP Development frameworks.

My technical depth includes cloud security, data security, and IAM, supported by vulnerability assessments and tuning scanning tools to prioritize remediation for critical exposures. I also manage security tool health checks to maintain consistent SOC coverage across banking and Cloud Platforms.

I’m driven by proactive defense through threat intelligence and threat hunting, including malware analysis and containment after suspected breaches. I’ve also built hands-on lab experience with Splunk, Kali Linux, Metasploit, and NIST SP 800-61-style incident response workflows.

Experience

Work history, roles, and key accomplishments

SOC Analyst

NSI Technologies

Jan 2024 - Jan 2025 (1 year)

Monitor and triage security alerts using SIEM tools to detect and contain emerging cyber threats. Tune EDR detections, perform vulnerability assessments and penetration testing, and conduct threat hunting using threat intelligence.

SOC Operations SIEM EDR Detection Tuning Malware Analysis Vulnerability Assessment Penetration Testing 2FA IAM Huntress Threat Hunting Threat Intelligence

Security Support Engineer

Truehost Kenya

Jan 2022 - Jan 2024 (2 years)

Provide Level-1/2 incident response and technical support to reduce system downtime through rapid threat identification. Harden VPS and endpoints, manage backups and DLP protocols, and deliver security awareness training focused on social engineering and data security best practices.

Technical Support Endpoint Security Backup Security Awareness Training Social Engineering Security Best Practices

ICT Supervisor

IEBC Kenya

Aug 2022 - Aug 2022 (0 months)

Ensure secure operation of biometric voter verification systems using KIEMS Kits. Automate electronic result transmission to reduce reporting delays while maintaining secure network protocols.

Secure Biometric Systems Data Security Network Protocols Electronic Result Transmission Automation Network Security KIEMS Kit

IT Technical Support Assistant

ICT Authority

Jan 2021 - Jan 2022 (1 year)

Install and secure workstations and networks in compliance with local data protection standards. Manage patch management and antivirus deployment to protect regional endpoints from cybersecurity vulnerabilities.

Workstation And Network Setup Endpoint Security Patch Management Data Protection Compliance Security Hardening