Junior security analyst and penetration tester, building in public.
I triage alerts in Wazuh, test web applications and APIs, and write up what I find, including what I got wrong.
13
findings in the vAPI assessment
Team of 12
VulnBank engagement, rated Critical overall
Wazuh
detection lab, in progress
- Junior security analyst or penetration-tester roles
- Nairobi, open to remote
- B.Sc. Computer Security and Forensics, Kabarak University, 2024
Start here
vAPI — API Security Assessment
“How much trust does an API place in client-controlled requests?”
Key findings
- 13 confirmed findings across API and Arena challenges
- Authentication and authorization failure analysis
- Evidence-driven remediation and reporting
VulnBank — Application Security Assessment
“Can I trace an application security issue from request to root cause?”
Key findings
- Team engagement of 12 testers, rated Critical overall
- Financial manipulation and account takeover paths
- Mobile and source-code security review
Windows Authentication Detection & Triage Lab
“What does a failed logon look like to the analyst, and how do they decide what it means?”
Key findings
- Two cases: local triage, then a real remote attack
- Correlated 9 failures to a success from one source
- Caught Wazuh mislabelling a brute force as pass-the-hash
Where I've done the work
Cybersecurity Trainee
AfricaHackon
- Performed reconnaissance and information gathering on target environments
- Conducted system and service enumeration using industry-standard tools
- Identified and validated security vulnerabilities in controlled lab environments
Security Operations Intern / ICT Attachment, Information Security Department
Kenya Power and Lighting Company (KPLC)
- Monitored security alerts and performed initial triage on SIEM-generated incidents, classifying severity and validity before escalating confirmed threats to senior analysts
- Executed alert validation workflows to reduce false-positive noise for the incident response team
- Conducted vulnerability scans and documented findings with CVSS scoring and remediation guidance for IT teams
Skills, with the evidence
Each claim links to the page that backs it up, with its limits stated.
What I'm working on this week
Pulled from my latest project, writeup and post, so it is never out of date.
Windows Authentication Detection & Triage Lab
A Wazuh lab that follows Windows authentication events from collection to an analyst disposition: a local failed-logon triage, then a real remote brute-force attack from Kali investigated end to end.
Following a Failed Logon Through a SIEM
04 Oct 2026
Why request analysis matters more than payload memorization
24 Aug 2026
Let's talk security.
Open to junior security analyst and penetration-testing roles, in Nairobi or remote. Happy to talk through a finding, a lab, or where offense meets detection.