Professional Resume
Security Operations Engineer with expertise in incident response, SIEM implementation, and compliance alignment
Personal Information
-
Name:
Victor Nthuli -
-
-
Location:
Nairobi, Kenya -
Core Skills
Security Monitoring & Incident Response
None%SIEM Tools & Analytics
None%Penetration Testing & Exploitation
None%Linux Systems Security
None%Cybersecurity Leadership & Training
None%Threat Intelligence & Reconnaissance Automation
None%Identity & Access Management
None%Vulnerability Assessment
None%API Security & Design
None%DevSecOps & Secure CI/CD Pipelines
None%Cloud Security
None%Education
BSc. Applied Computer Technology
United States International University – Africa
2019 – 2023
Concentration: Cybercrime & Forensic IT
KCSE
Light Academy Highschool
2015 – 2018
KCPE
Rockfields Junior School
2007 – 2014
Certifications
Certified Cyber Security Technician (CCT)
In Progress
Getting Started with MITRE ATT&CK
Completed: 11/07/2024
Burp Suite Basics
Completed: 10/02/2024
Zero to Linux with Hal Pomeranz
Completed: 09/05/2024
Conquering your CISSP
Completed: 09/04/2024
The Illustrated Pentester
Completed: 08/29/2024
Fearless Forensic Shell Fu
Completed: 08/28/2024
New Methods to Attack & Defend Active Directory
Completed: 08/07/2024
Introduction to OSINT
Completed: 07/19/2024
Active Defense & Cyber Deception
Completed: 07/18/2024
Professional Experience
Managing Director
SOCDEV AFRICA | Apr 2025 – Present
Security Operation Center & Development Company. Lead overall company strategy, execution, and growth, combining cybersecurity operations and innovative software solutions. Architected and deployed a full-stack, multi-tenant authentication system with biometric integration and role-based access control. Led threat detection, SIEM integration, and vulnerability assessments for diverse clients across Africa. Fostered a DevSecOps-centered engineering culture with a strong focus on mentorship and open-source contribution.
Security Engineer
Revere Tech | Mar 2026 – Present
Security engineering support spanning infrastructure hardening, monitoring, and incident response.
Security Consultant
Confidential (Kenyan Government / Defense-sector client) | Apr 2026 – Present
Providing security engineering and operations support for a government client. Scope and technical details withheld due to the sensitivity of the engagement.
Security Operations Engineer
Webmasters K Ltd | May 2023 – Apr 2025
Software Development Company. Conducted web and mobile application security testing and penetration assessments. Oversaw SIEM design, deployment, and integration with IT infrastructure. Led the secure deployment of OpenStack cloud environments and developed internal audit controls. Resigned in April 2025 due to strategic differences on execution timelines and internal alignment.
Technical Intern
Umar Auto Garage | Jul 2022 – Sep 2022
Vehicle System Monitoring and Wiring. Performed diagnostics, maintenance, and engine replacement tasks. Gained foundational understanding of system monitoring and technical operations.
Key Projects
Security Tools
RustVault: Self-Hosted Password Vault and Privacy Toolkit (2026)
A password vault and privacy toolkit written in Rust that runs only on your own machine: encrypted vault, recovery key, automatic backups, Firefox hardening and a script-blocking browser extension.
Endpoint Security
Windows Security Setup: Wazuh, Sysmon and Sysinternals in One Command (2025)
A PowerShell script that enrolls a Windows host into Wazuh and installs Sysmon and the Sysinternals Suite in one elevated command.
Security Operations
SOC & SIEM Lab: Wazuh, Graylog, OpenCTI and MISP (2025)
A self-hosted SOC stack: Wazuh for endpoint detection and response, Graylog for log aggregation, OpenCTI with MISP for threat intelligence, and Grafana for unified visualization.
Network-Traffic-Monitoring-with-grafana (2025)
This project provides a comprehensive solution for capturing network traffic, processing it with Zeek (formerly Bro), and storing the enriched logs into a MySQL database for further analysis and visualization. It includes scripts and configurations to enhance Zeek's capabilities with GeoIP, ASN data, and JA3/JA4 fingerprinting, enabling detailed network security monitoring and analysis.
Monitoring & Visualization
Security Report Wizard for Grafana (2025)
A FastAPI web wizard that pulls panel data from Grafana dashboards and turns it into spreadsheet reports for stakeholders without dashboard access.
Network Device Monitoring with Grafana (2025)
The Network Device Monitoring with Grafana project is a comprehensive, real-world implementation of a real-time monitoring system that leverages open-source tools like Nmap, MariaDB, Prometheus, Grafana, and Python scripting. This platform focuses on monitoring device availability, port activity, and service health across enterprise networks. It transforms traditional manual network auditing into an automated, visual, and scalable solution.
Professional References
Available upon request.
Ready to strengthen your security posture?
Let's discuss how my expertise in security operations can benefit your organization.
Contact Me Today