Looking for a job

Kinuthia Thumbi

@kinuthiathumbi

SOC Analyst at Expel investigating enterprise security alerts and tuning detection rules; independent bug bounty researcher since 2018.

Kenya

Message

At Expel, I investigate security alerts across enterprise environments, conduct threat hunting, and recommend containment and remediation actions. I’ve investigated hundreds of alerts and improved detection accuracy by tuning detection rules.

Since 2018, I’ve conducted responsible vulnerability disclosure through HackerOne and Bugcrowd, identifying web application and infrastructure vulnerabilities and writing technical reports. Earlier, I supported incident investigations at Jamii Telecommunications Limited (FAIBA) and network administration at the United Nations Environment Programme (UNEP).

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

Expel

Jan 2024 - Present (2 years 9 months)

Monitors enterprise environments using SIEM and EDR platforms, investigates security alerts, performs threat hunting, and improves detection logic to reduce false positives.

SIEM EDR Incident Response Threat Hunting Alert Triage Detection Engineering Security Automation

Current

Independent Security Researcher

Current

HackerOne & Bugcrowd

Jan 2018 - Present (8 years 9 months)

Conducts responsible vulnerability disclosure for organizations worldwide, identifies web application and infrastructure vulnerabilities, and produces detailed technical reports.

Vulnerability Assessment Web Application Security Penetration Testing Responsible Disclosure Technical Writer

Junior SOC Analyst

Jamii Telecommunications Limited

Jan 2022 - Dec 2023 (1 year 11 months)

Monitored enterprise infrastructure for malicious activity, investigated phishing, malware, brute-force, and unauthorized access attempts, and assisted in SIEM monitoring and incident investigations.

SIEM Incident Response Phishing Analysis Malware Analysis Security Monitoring

Network Administrator Intern

United Nations Environment Programme

Jan 2021 - Dec 2021 (11 months)

Supported administration of enterprise network infrastructure, assisted users with connectivity and troubleshooting, and performed system monitoring and maintenance.

Network Administration Troubleshooting System Monitoring Security Best Practices