Open to opportunities

Lungelo Busakwe

@lungelobusakwe

SysOps Team Lead at Conosco, standardising security operations and automating integrations across a Microsoft-centric stack.

South Africa

Message

At Conosco, I lead the SysOps engineering function and act as custodian of the Microsoft-centric security and endpoint stack across managed clients. I set technical direction for engineers across L1–L3 and oversee platform standards, change control, and health.

I scope, design, and deliver system integrations and automation from requirements through production rollout. I also drive adoption of Claude Code and GitHub workflows to accelerate automation development and support repeatable collaboration.

Previously, as SOC Analyst L3 at Conosco, I standardised onboarding and offboarding configurations across 10+ clients and automated SOC tasks, alerts, and reports with custom playbooks. I was also the final escalation point for critical support tickets and mentored four junior analysts in threat hunting and incident response.

At BCX, I administered Sentinel, Cybereason, Darktrace, and Azure AD in an MSSP model, building integrations and threat playbooks and participating in incident response engagements. Across my security operations work, I have also delivered penetration testing, vulnerability management, and SIEM/SOAR administration.

Experience

Work history, roles, and key accomplishments

Current

SysOps Team Lead

Current

Conosco

Lead the SysOps engineering function, acting as custodian of the full Microsoft-centric security and endpoint stack. Drive automation, new project delivery, and system integration across managed clients.

Microsoft 365 Defender XDR Microsoft Defender For Endpoint Microsoft Defender for Identity Defender For Cloud Apps Microsoft Sentinel Entra ID Microsoft Intune Azure Addigy NCentral Qualys Claude Code GitHub Python BASH

SOC Analyst L3

Conosco

Led client onboarding and offboarding, standardising configurations across 10+ clients. Spearheaded automation of SOC tasks, alerts, and reports, and served as final escalation point for critical incidents.

SOC Operations Automation Playbooks Threat Hunting Incident Response Mentorship Client Onboarding Reporting

Senior SOC Responder

DRS (Cyber1)

Ensured L1 & L2 process accuracy, developed SLA and executive reports, and conducted active threat hunting. Administered SIEM and SOAR platforms, and served as third point of escalation for incident management.

SIEM SOAR Threat Hunting Incident Response Penetration Testing Vulnerability Management Red Team Blue Team Mentorship Reporting

Senior Specialist: Threat Hunter

BCX

Led administration of Sentinel, Cybereason, Darktrace, and Azure AD in an MSSP model. Designed and automated use cases via APIs, developed threat playbooks, and acted as escalation point for complex investigations.

Microsoft Sentinel Cybereason Darktrace Azure AD API Integration Threat Hunting Playbooks Incident Response Automation Reporting

SOC Analytical Lead Specialist

Datacentrix

Administered SIEM infrastructure and designed correlation logic. Provided advanced analytical expertise, enriched SIEM with threat intelligence, and mentored analysts and interns.

SIEM Correlation Rules Threat Intelligence Incident Response Mentorship PhishMe Reporting Security Monitoring

Senior Security Analyst

Mitigate

Managed and administered McAfee SIEM and related infrastructure. Designed and automated use cases, scripted processes with Python and Bash, and enriched SIEM with threat intelligence feeds.

SIEM Splunk Python BASH Threat Intelligence Correlation Rules Incident Response Threat Hunting Automation

Education

Degrees, certifications, and relevant coursework

Cape Peninsula University of Technology

Certificate in Cyber Security, Cyber Security

Completed a Certificate in Cyber Security at NQF Level 5 through the Cyber Security Institute / FSAAT / Cape Peninsula University of Technology in 2015.