Open to opportunities

Shadrack Kube

@shadrack-kube

Message

Over 9 years in ethical hacking, cloud security, risk mitigation, and proactive defense.

Kenya

Message

What I'm looking for

I seek a challenging role in cybersecurity that fosters innovation and growth.

A Dynamic Cybersecurity Professional with a track record of over 9 years in the ICT Industry, encompassing expertise in cybersecurity, information systems audit, IT standards compliance, and computer networking. I possess a profound understanding and hands-on experience in ethical hacking methodologies, as well as tactics for system vulnerability assessments and penetration testing across networks, web servers, and mobile applications. Moreover, I have a background in IT general controls review, IT infrastructure assessment, cybersecurity governance encompassing policies, strategy, and frameworks, cybersecurity awareness, and business continuity planning. As a strategic leader, my focus lies in risk mitigation and proactive defense, and I am prepared to introduce innovative solutions to fortify organizational cybersecurity.

Core Competencies are;

Vulnerability Assessment & Penetration Testing
Virtualization Using Hyper-V, VirtualBox, KVM, and VMware
Automation and Scripting in VBScript, Shell script, Bash script, and PowerShell script.
Terraform for IaC (Infrastructure as Code)
Writing Semgrep, Trivy and Nuclei Rules
Chef Infra and Ansible for CaC (Configuration as Code)
Software development in PhP, Python and Javascript
DAST and SAST (Dynamic and Static Application Security Testing
Cloud Native setup, configuration and management
Source Code Review
Deploying infrastructure on AWS, Google Cloud (GCP), Azure
Security Industry Standards; OWASP, NIST, SANS and DigitalOcean.

Experience

Work history, roles, and key accomplishments

Current

Senior Information Security Engineer

Current

KOKO Networks

Aug 2023 - Present (1 year 9 months)

- Leads penetration testing and vulnerability management for systems, including mobile apps and cloud infrastructure.
- Developed SOC playbooks and processes, and built threat intelligence capabilities.
- Focused on compliance and quality assurance in engineering operations.

Penetration Testing Vulnerability Management SOC Threat Intelligence

Senior Consultant, Application Security

Aqua Security

Jan 2024 - Jan 2025 (1 year)

- Analyzed code for vulnerabilities and developed detection rules for security tools.
- Conducted research on malware and collaborated with teams to enhance cloud-native application security.

Cloud Security Cross Functional Collaboration Golang Azure GitHub Actions Github Workflows GitHub

Senior Secure by Design Specialist

Tech Mahindra

Feb 2022 - Aug 2022 (6 months)

Conducted penetration testing and vulnerability assessments on mobile and web applications. Designed a data masking tool and provided knowledge for developing a SOC for security visibility.

Penetration Testing Vulnerability Assessment Data Masking SOC Security Compliance

Cyber Security Engineer

Jighi Inc

Sep 2017 - Mar 2019 (1 year 6 months)

Led a team in designing a Cyber Threat Intelligence system. Conducted application penetration tests and security awareness training.

Threat Intelligence Penetration Testing Security Awareness Cyber Forensics

Lead Red Team Assessor

Dimension Data MEA

Apr 2019 - Jan 2022 (2 years 9 months)

- Led red team engagements and penetration testing for clients.
- Designed SOCs in Kenya and Ghana, increasing revenue significantly.
- Developed security policies and conducted phishing campaigns.

Red Team Penetration Testing Phishing

Systems Administrator and Web Developer

DeepAfrica Limited

Apr 2017 - Sep 2017 (5 months)

- Designed and developed web applications, managed network setup, and conducted security audits.
- Ensured uptime and security of systems.

Web Development Network Management Security Auditing

Assistant Systems Admin (Intern)

Coast Institute of Technology

Jan 2016 - Apr 2016 (3 months)

Redesigned the network infrastructure and implemented security configurations. Developed an e-voting system and contributed to a national science fair project.

E Voting System Development