Looking for a job

kananura manzi justin

@kananuramanzijustin

Message

Security Operations Engineer at CyLab Africa / Upanzi Lab, building ELK SIEM pipelines and detection rules.

Rwanda

Message

What I'm looking for

I'm looking to support managed security services across multiple client environments.

At CyLab Africa / Upanzi Lab, I deploy and maintain an ELK-based SIEM for centralized monitoring and multi-site log ingestion. I also developed detection rules and resolved cluster issues to keep ingestion healthy.

For a MOSIP deployment, I deployed Elastic Agent across Kubernetes nodes and designed an ingest pipeline for four log formats. I also conduct vulnerability assessments and secure configuration reviews, and track remediation to closure.

As a SOC Analyst at Rwanda Directorate of Immigration and Emigration, I monitored security events with ELK and Security Onion, investigated incidents, and supported containment and remediation. I also tuned detection rules and took part in threat hunting.

On the Continent-Wide Threat Intelligence Capability project, I deployed honeypots and integrated MISP and CAPEv2 with Elasticsearch. I also built the DPI Monitor academic SOC platform, combining ELK, an ML anomaly-detection engine, a FastAPI backend, and a React frontend.

Experience

Work history, roles, and key accomplishments

Current

Security Operations Engineer

Current

CyLab Africa / Upanzi Lab

Jul 2025 - Present (1 year 3 months)

Deploy, administer and maintain the ELK-based SIEM for centralized security monitoring and multi-site log ingestion. Develop detection rules, conduct VAPT, and prepare incident reports and security posture metrics for stakeholders.

ELK Elasticsearch Logstash Filebeat Packetbeat SIEM Detection Rule Development VAPT Vulnerability Assessment System Hardening Incident Reporting Docker Kubernetes Python BASH

Research Assistant

CyLab Africa / Upanzi Lab

Aug 2024 - May 2025 (9 months)

Researched ransomware and anomaly-based intrusion detection, developing an ML-based IDS using Isolation Forest. Evaluated IDS/IPS and SIEM integrations and produced technical security documentation and detection analyses.

Machine Learning Isolation Forest Intrusion Detection IDS IPS SIEM Security Documentation Research

SOC Analyst

Rwanda Directorate of Immigration and Emigration

Mar 2022 - Aug 2024 (2 years 5 months)

Monitored network, server and application security events using ELK and Security Onion, investigating alerts and incidents. Developed and tuned detection rules, performed log-based forensic analysis, and supported containment and remediation.

ELK Security Onion SIEM Detection Rule Development Incident Response Forensic Analysis Vulnerability Assessment Threat Hunting Firewall Rule Review VPN

Software Developer

Rwanda Directorate of Immigration and Emigration

Mar 2019 - Feb 2022 (2 years 11 months)

Developed secure enterprise applications with access control and database security. Implemented secure coding practices and supported system hardening, working with infrastructure and security teams to ensure compliance.

Secure Coding Access Control Database Security System Hardening Compliance

Junior System Administrator

Rwanda Directorate of Immigration and Emigration

Nov 2016 - Feb 2019 (2 years 3 months)

Managed and secured enterprise infrastructure (Linux/Windows), configuring network security, access controls and backups. Supported disaster recovery and risk assessment, and delivered internal security awareness training.

Linux Windows Server Network Security Access Control Backup Disaster Recovery Risk Assessment Security Awareness