12+ Years Enterprise IT · CompTIA Security+ (SY0-701) Certified · BSc Computer Science — In Progress
CompTIA Security+ certified enterprise IT professional with 12+ years of experience across systems, infrastructure, networking, access control, endpoint security and business-critical operations, now focused on SOC operations, detection engineering, incident response/DFIR and security automation.
My portfolio is evidence-first: professional experience, authorized independent labs, coursework and virtual job simulations are clearly separated so recruiters can understand exactly what each project demonstrates.
Security workflow: Environment → Risk → Telemetry → Detection → Investigation → Remediation → Validation
Based in Zimbabwe · Open to international opportunities and relocation
| Area | Evidence |
|---|---|
| 🛡️ SOC Operations | Wazuh · Splunk · Windows/Sysmon · alert triage · investigation |
| 🎯 Detection Engineering | Detection logic · validation · MITRE ATT&CK |
| 🔎 DFIR / Incident Response | Forensics · evidence handling · IOC analysis |
| 🌐 Network Security | Nmap · Wireshark · PCAP · traffic analysis |
| ☁️ Cloud Security | GCP · Terraform · IAM · VPC security architecture |
A recruiter-facing collection of documented security labs, detection work, investigations, cloud controls, application-security exercises and automation.
| Domain | Demonstrated focus | Technologies |
|---|---|---|
| SOC / SIEM | Monitoring, alert triage, log analysis, investigation | Wazuh · Splunk/SPL · Sysmon |
| Detection Engineering | Detection logic, validation, attack simulation | Wazuh · Sigma · MITRE ATT&CK |
| DFIR / IR | Evidence handling, forensics, IOC analysis | Volatility · AVML · Linux/Windows |
| Windows / Identity | Authentication, privilege monitoring, hardening | Windows Server · AD · PowerShell |
| Network Security | Reconnaissance, PCAP and traffic analysis | Nmap · Wireshark · tshark |
| Cloud / IaC | Secure architecture and controls | GCP · Terraform · IAM · VPC |
| Application Security | Authorized web-security assessment | Burp Suite · OWASP · DVWA · Juice Shop |
| Automation | Repeatable security workflows | Python · Bash · PowerShell |
- Splunk SOC Lab Track — six connected SOC investigation labs using controlled synthetic telemetry.
- Windows → Sysmon → Wazuh detection and investigation workflows.
- Attack simulation & detection engineering with controlled validation and ATT&CK mapping.
- Linux and Windows forensic investigations with evidence-handling and IOC workflows.
- Network reconnaissance and PCAP analysis using Nmap, Wireshark and tshark.
- Active Directory security and privilege-monitoring scenarios.
- GCP/Terraform security architecture and IAM/VPC controls.
- Application security exercises using authorized OWASP/DVWA/Juice Shop environments.
- Python, Bash and PowerShell security automation.
- CompTIA Security+ (SY0-701) — Certified · Issued July 2026 · Valid through July 2029
- Cisco Junior Cybersecurity Analyst Career Path
- Cisco Introduction to Cybersecurity
- GRC Fundamentals
- Introduction to AI Security
- Google Cybersecurity Professional Certificate — Issued July 2023
- Google IT Support Professional Certificate — Issued June 2025
- Google AI Essentials
- Introduction to Generative AI — Google
- Artificial Intelligence Fundamentals — IBM
- Mastercard Cybersecurity Job Simulation — Forage
- Datacom Cyber Security Operations Job Simulation — Forage
- Deloitte Australia Cyber Job Simulation — Forage
- AIG Shields Up: Cybersecurity Job Simulation — Forage
Virtual job simulations are presented separately from employment and independent technical labs.
My enterprise IT background includes:
- Windows environments and Windows Server
- Active Directory and access control
- Least privilege and permissions management
- Endpoint protection
- System hardening and patch management
- Network and infrastructure operations
- Business-critical technical support
This foundation informs my security approach: understand the environment, collect useful telemetry, identify abnormal activity, investigate evidence and remediate the underlying issue.
- BSc in Computer Science — Unicaf University · In Progress
- Diploma in Information Technology — Macmaine School of Computing
- Diploma in PC Maintenance and Networking — Macmaine School of Computing
Qualification accuracy: National Diploma in ICT — Harare Polytechnic is not part of my current qualification profile and is intentionally not listed.
Primary: SOC Analyst · Security Operations Analyst · Cybersecurity Analyst
Additional: Detection Engineering · Incident Response · Threat Hunting · DFIR · Security Automation · Junior Security Engineering
Availability: Open to international opportunities and relocation.
The public cybersecurity portfolio is published from a private development repository after automated security and quality validation. Private career operations and sensitive application data remain private.
Portfolio evidence distinguishes professional experience, independent authorized work, coursework and virtual experience. Security testing is performed only against systems and environments intentionally authorized for testing.
Live Portfolio · GitHub · Cybersecurity Portfolio · LinkedIn
Evidence-backed. Security-focused. Explicit about scope.