At CYBLACK, I triaged SIEM alerts in Splunk and Microsoft Sentinel, detecting phishing, brute-force, and malware activity. I also investigated suspicious sign-ins and documented incidents with root-cause analysis and remediation recommendations.
I analyzed PCAPs and malware using Wireshark and sandbox tools, identifying C2 traffic, suspicious payloads, and lateral movement. I created custom KQL detection rules and documented indicators of compromise in playbook-based incident response aligned with MITRE ATT&CK.
My security operations projects include investigating phishing emails, malware, and suspicious logins with Microsoft Sentinel, Microsoft Defender, and KQL. I also configured Azure AD with MFA and integrated Microsoft Purview for DLP.
I'm completing a Bachelor of Science in Information Systems and Technology at UNITED STATES INTERNATIONAL UNIVERSITY-AFRICA, specializing in Forensic and Cyber Crime with a technical focus on Blockchain Forensics. Through community work, I contributed to the Mosaic of US project and coordinated vocational training for teen mothers in Nairobi.
