Kefa Cheruiyot

I am an Offensive Security Engineer with hands-on experience conducting vulnerability assessments, penetration testing (VA/PT), threat hunting, incident response, and cyber risk analysis within highly regulated banking and enterprise environments.

Currently working as an Offensive Security Engineer at Serianu Ltd., I perform comprehensive security assessments across applications, infrastructure, networks, and cloud environments using tools such as Burp Suite, Nessus, OpenVAS, Nikto, Metasploit, Nmap, Splunk, Microsoft Sentinel, IBM QRadar, ELK Stack, Wireshark, and Fortinet solutions.

My expertise includes:

• Web application penetration testing

• Network security assessments

• Vulnerability management

• Threat hunting and OSINT investigations

• Security monitoring and incident response

• Security auditing and compliance assessments

• Risk analysis and remediation planning

• Security awareness and cyber resilience training

Previously at the Kenya Revenue Authority (KRA) and Kenya Women Microfinance Bank (KWFT), I contributed to enterprise cybersecurity operations by leading real-time threat detection, forensic investigations, compliance monitoring, incident handling, security audits, and secure infrastructure assessments aligned with ISO/IEC 27001, NIST, and CBK cybersecurity frameworks.

I have practical experience working with SIEM, SOAR, EDR, firewall technologies, and threat intelligence platforms, helping organizations strengthen cyber resilience against evolving threats.

Beyond operations, I also mentor students and professionals in cybersecurity, secure coding, Python, JavaScript, AI, and machine learning while promoting offensive security practices and secure application development.

Certifications include:

• CompTIA Security+

• Certified Ethical Hacker (CEH)

• Cisco CyberOps Associate

• Cisco DevNet Associate

• CCNA

• Linux Essentials

• PRINCE2 Foundation & Practitioner

I am passionate about offensive security engineering, adversarial testing, emerging attack techniques, and building proactive cyber defense strategies that help organizations stay ahead of modern threats.