Position: SecOps Engineer
Category: Security
English level: fluent
Years of experience: 4

At Voltron Data
1. Deployed Datadog Cloud SIEM to monitor multicloud infrastructure (AWS & GCP)
2. Deployed Jumpcloud solution to enterprise devices to ensure security patching and updates are rolled out automatically increasing device security by 90%
3. Trained a team of 100 developers on intergrating security to their Software Development Lifecycle (SDLC)

At eKRAAL
1.  Designed, built and operated the Security Operations Centre (SOC) and onboarded 2 clients
2. Trained in 4 different cohorts of 25 individuals each on various aspects of cybersecurity (offensive and defensive)
Voltron Data - Remote
SecOps Engineer
Reporting to the Lead, I was responsible for:
1. Reviewing threat feeds, researching trending threat campaigns, attack vectors, and TTPs from various sources to build threat mitigations. 
Tools: MISP, OpenCTI, Darkweb, Twitter
2. Deploying security technologies, e.g SIEM, building dashboards and setting up detection rules on organisation use cases. 
Tools: AWS SecurityHub, AWS CloudTrail, AWS Cloudwatch, Datadog Cloud SIEM, GCP Audit Logs
3. Monitoring, investigating and triaging security incidents within the cloud environment
Tools: AWS CloudTrail, GCP Audit logs, Datadog Cloud SIEM, Lacework, Docker, Kubernetes
4. Contributing to internal security reviews and audit of our codebase
5. Liaising with software development team to ensure that security is considered throughout the lifecycle

eKRAAL Innovation Hub - DSEC
SOC Lead
Reporting to the CISO, I was responsible for:
1. Enabling end-to-end visibility to protect the company’s critical assets and create a complete view of security risks and incidents
Tools: SecurityOnion
2. Evaluating, interpreting, and integrating all sources of information, and fusing computer network attack analysis with counterintelligence.
Tools: MISP, SecuritOnion, TheHive, Cortex
3. Conducting vulnerability assessments and penetration tests on a need basis.
Tools: Kali Linux, Nessus, Burpsuite
4. Developing and maintaining comprehensive documentation on incidents and analysis for clients and internal.
Tools: Autopsy, Remnux, Thehive
5. Providing recommendations for improvements to security policy, procedures, and architecture based on operational insights.
6. Onboarding processes, security awareness initiatives, and new hire orientation