Denis Kiboi

I am a highly motivated and experienced cyber security professional with a proven track record of success in conducting information security assessments, vulnerability assessments, penetration tests, and other security-related activities. I am also skilled in managing their information security programs, business continuity and disaster recovery, identity and access management, information protection, and data privacy.

I have a strong understanding of security risks and threats, and I am proficient in using a variety of security tools and techniques. I am also an excellent communicator and can explain complex technical concepts to non-technical audiences.

I am confident that I have the skills and experience that you are looking for in a candidate for this role. I am eager to learn more about the position and the company, and I am confident that I would be an asset to your team.

Network and Security Specialist at KEMRI-Wellcome Trust July 2019-Current

• Aligning organizational security strategy and infrastructure with overall business and technology strategy. • Identify security design gaps in existing and proposed architectures and recommend changes or enhancements • Technical lead overseeing the deployment, integration and initial configuration of all new technical security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures and the enterprise’s security documents specifically. • Collaborating with vendors to conduct proof-of-concepts for cybersecurity solutions. • Ensuring that high availability and disaster recovery are maintained in compliance with the best industry standards for deployed solutions. • Making sure that appropriate change management and system handover procedures are followed. • Responding quickly and effectively to all security incidents and providing post-event analyses. • Research and identify new technologies to improve system/data confidentiality, integrity, and availability. • Providing knowledge transfer to other team members or staff on new or relevant topics in cybersecurity. • Recommending significant upgrades when necessary and collaborating with the operations team to execute them. • Developing project timelines for system upgrades and preparing cost estimates. • Acts as a knowledge expert in the development of customized organization security training content to drive cybersecurity awareness from employee onboarding, simulations, and security awareness training.

Network Transport Engineer IP—Telkom Kenya Ltd 2015- 2019

• Designing and implementation of IP Routing, Switching and Security solutions for enterprice customers • Creating, Reviewing and/or approving HLDs, LLDs, Detailed Designs, Statements of requirements etc. • Provide training, troubleshooting and preventative maintenance guides to Operations Team • Troubleshoot IP network problems quickly and help provide sound engineering solutions by maintaining deep knowledge of Telkom’s Data Network architecture, topology, and up-to-date configuration details. • Provided day to day support to the Project Managers and Design Team to deliver the required network configurations within all work packages. • Supporting the Network Architects by configuring and implementing networks in line with the design documentation set. • Took ownership of network build documentation components (HLD/LLD) for specific key program activities such as Integration, Pre-Production and the live environment. • Provide input into reports, when required, to the Lead Network Architect, Project Network architects and Project Managers. • Liaising with other technical project team members such as Integrators, test engineers and Operations to ensure that the network element of the infrastructure and systems are built in a timely manner. • Support second and third tier escalations for all operational outages in IP network.

Network and Infrastructure Security Administrator-Kenyatta University May 2015- July 2015

• Conducting Nessus vulnerability scans on all institution assets to identify weaknesses that could be exploited by threat actors and remediating. • Setting and implementing user access controls, identity and access management systems • Designing, configuring, deploying, and maintaining the institutions enterprise security infrastructure • Performing IT related risk assessments on IT controls, information assets and third parties. • Managing IT risks through their lifecycle (evaluate, identify, triage, rate, engage stakeholders, remediation, and reporting). •Actively protecting institutions information, technology assets and infrastructure from external or internal threats and ensuring compliance regarding information access, security and privacy •Implementing firewall (ASA & Checkpoint) solutions to properly secure data and provide consultation on all new firewall implementations, firewall configuration changes, and projects requiring security operational support •Assisting the end-user, other IT professionals in requesting security variances and implementation of subsequent configuration change requests •Recommending best security practices to achieve stated objectives, advising on risk assumptions for any variances granted, and providing alternatives to achieve desired end results •Assisting in incident responses for any breaches, intrusions, or theft •Monitoring systems for any anomalies, proper updating, and patching

BSc. Information Technology

Jomo Kenyatta University of Agriculture and Technology (2006 – 2009)