Security is not just a feature.
It's a mindset.
I'm Victor Nthuli — I secure cloud infrastructure, implement SIEM solutions, and harden enterprise systems against evolving threats, so the engineering teams I work with can move fast without trading away security.
Core Expertise
Specialized in securing modern infrastructures and responding to emerging threats
Security Monitoring & Incident Response
Advanced proficiency in monitoring security alerts, analyzing complex incidents, and orchestrating timely responses across cloud and on-premises environments.
Identity & Access Management
Expert in implementing robust access controls, user provisioning, and rights deprovisioning, ensuring compliance with security policies and regulatory standards.
Vulnerability Assessment
Skilled in conducting detailed vulnerability assessments to identify and mitigate potential threats, enhancing organizational security posture.
Featured Projects
The latest from my security engineering portfolio
RustVault: Self-Hosted Password Vault and Privacy Toolkit
2026
A password vault and privacy toolkit written in Rust that runs only on your own machine: encrypted vault, recovery...
Windows Security Setup: Wazuh, Sysmon and Sysinternals in One Command
2025
A PowerShell script that enrolls a Windows host into Wazuh and installs Sysmon and the Sysinternals Suite in one...
Latest Security Insights
Thoughts and analyses on cybersecurity trends and best practices
Pyramid of Pain: Why Blocking Hashes Won't Save Your SOC
The Pyramid of Pain ranks indicators by how much it costs attackers when you detect them. This tour goes through it with one worked example per level and argues that behaviour beats chasing indicators.
PHP2Shell Triage: Find Exposed PHP, Hunt Webshells, Patch Safely
PHP2Shell's first known victims weren't WordPress blogs. They were firewalls running PHP that nobody had listed. This playbook covers finding exposed hosts, hunting webshells, patching without outages, and where AI helps on each side.
Ready to secure your digital assets?
Whether you need help with incident response, SIEM implementation, or security assessments, I’m here to help you protect what matters most.
Get in Touch