Looking for a job

Kamande John

@kamandejohn

Message

Cybersecurity professional with 6+ years securing through SIEM, incident response, and risk management.

Kenya

Message

What I'm looking for

I’m looking to strengthen your security monitoring and incident response with tuned SIEM/SOAR/EDR, vulnerability management, and ISO 27001-aligned governance—turning complex findings into clear actions that reduce risk quickly.

I’m an experienced Information Security Specialist and Cyber Security professional with more than 6 years enhancing organizational security through strategic monitoring, incident response, vulnerability management, and infrastructure hardening.

I specialize in configuring and optimizing SIEM solutions like QRadar and ELK, alongside SOAR and EDR technologies, and I bring strong threat intelligence and analysis to proactively address security risks.

In my current and previous roles, I’ve improved monitoring and response performance—implementing SIEM-based monitoring and incident reporting that reduced incident response times by 30%, and building custom alerting and log parsing to boost visibility and efficiency (including a 40% improvement within six months).

I’m equally focused on governance and compliance, leading security awareness programs and hardening initiatives that improved adherence to security controls and readiness against threats, while delivering actionable security reporting aligned to standards such as ISO 27001 and CIS.

Experience

Work history, roles, and key accomplishments

Current

IT Security Analyst and Administrator

Current

AceClass Developers

Aug 2022 - Present (3 years 8 months)

Implemented SIEM-based security monitoring and incident reporting using Microsoft Defender ATP and Check Point IPS/IDS, reducing incident response times by 30%. Built custom Python alerting and log parsers, delivered physical security policies, and reduced vulnerabilities by 60% through patch management and security audits.

SIEM ELK Incident Response Python Microsoft Defender Vulnerability Management Patch Management Physical Security

ICT Risk Officer / Information Security Officer

Kingdom Bank Ltd

Nov 2021 - Jul 2022 (8 months)

Provided IT risk support and security services, improving internal audit efficiency by 25% and increasing security awareness by 40%. Supported security readiness and incident management by continuously monitoring tools like Imperva DAM and Darktrace, and improved access control discrepancy reduction by 30%.

IT Risk Management ISO 27001 Incident Management Security Awareness

Information Security Consultant

Sentinel Africa Consulting

Jun 2019 - Oct 2021 (2 years 4 months)

Conducted information security internal audits and vulnerability assessments aligned to ISO 27001:2013, strengthening compliance and security for banking and government clients. Delivered risk assessments for new products and managed security services, including deploying Bitdefender solutions and leading internal/external pentesting activities.

ISO 27001 Vulnerability Assessment Penetration Testing Risk Assessment Information Security BitDefender Security Assessments