Summary

Aspiring Cybersecurity Professional pursuing a BS degree with training in ISC2 Certified in Cybersecurity (CC). Gained experience in security audits during an internship at INSA and developed hands-on SIEM deployment projects. Interested in bridging Governance, Risk, and Compliance (GRC) with technical security practices such as penetration testing.

Certifications

  • Completed ISC2 Certified in Cybersecurity (CC) Training Programme
  • Completed Certified Cloud Security Professional (CCSP) Training
  • Ranked in the top 6% globally in Advent of Cyber 2025 (24+ hands-on labs)
  • Received Certificate of Participation in Cybershield Showdown CTF organised by Yekolo Temari
  • Received Certificate of Participation in Local Coding Hackathon (Community Problem Solving)
  • Five Million Coders Certified

Projects

  • SENSELET - An agro-industrial correlation platform between traders, farmers and government to manage the market balance and avoid inflation and waste of resource.
  • BeeHive - An automated honeypot system that allows organizations to track attacker's behavior while trying to steal information and decoy the trap.
  • Designed and deployed a centralized SIEM lab using Wazuh to collect and analyze logs from Linux endpoints and visualize security alerts through custom dashboards.
  • Performed network traffic analysis using Wireshark to identify malicious communication patterns and potential data exfiltration attempts.
  • Performed network reconnaissance and vulnerability scanning using Nmap.
  • Tested OWASP Top 10 vulnerabilities (XSS, SQL Injection) in controlled lab environments using Burp Suite.
  • Conducted phishing simulation exercises using Setoolkit in controlled environments.
  • Shipping applications and deploying with Docker

Experience

Cybersecurity Intern | Information Network Security Administration (INSA)

June 2025 – September 2025
  • Participated in penetration testing activities and security audits on critical infrastructure, ensuring alignment with INSA 29001 standards and documenting high-risk findings for remediation.
  • Conducted gap analyses and risk assessments mapped to ISO 27001, GDPR, and PCI DSS to strengthen organizational data protection and business continuity strategies.
  • Collaborated with development teams to integrate security into the SDLC, performing web application testing and providing actionable mitigation strategies for OWASP Top 10 vulnerabilities.
  • Authored detailed technical reports for executive stakeholders, translating complex vulnerability data into prioritized risk-reduction roadmaps.

Cybersecurity Studies & Labs

January 2023 - June 2026
  • Studied core cybersecurity concepts including network security, cryptography, web security, system security, and digital forensics.
  • Conducted hands-on labs in penetration testing, vulnerability assessment, and network analysis.
  • Used security tools including Wireshark, Nmap, Metasploit, and Burp Suite during practical labs.
  • Identified vulnerabilities in web applications and systems in controlled lab environments.
  • PortSwigger Academy Practitioner for Web Application Penetration Testing

Cybersecurity Community Mentor | Telegram

200+ Members
  • Managed a cybersecurity learning community with 200+ members.
  • Shared cybersecurity resources, labs, and learning materials.
  • Guided members on security fundamentals and best practices.
  • Encouraged discussion and collaborative learning among students.

References

Available upon request!