Ag. Senior Manager, Cybersecurity & Compliance · Kigali, Rwanda
SOC operations · SIEM (Wazuh) · VAPT programme management · IT risk & regulatory response (BNR / NCSA) · financial-sector and public-sector systems
I lead detection, incident response, vulnerability follow-up, and compliance reporting for digital financial services. This GitHub account is a sanitized professional portfolio. Lab IPs use RFC 5737 documentation ranges (192.0.2.0/24). Production addresses, credentials, customer data, and confidential findings are not published.
| Domain | What I practise |
|---|---|
| SOC / SIEM | Wazuh manager & agents, detection rules, alert triage, log-source onboarding |
| VAPT | Scoped assessments, finding prioritisation, remediation tracking, retest evidence |
| Network defence | Segmentation, firewall policy review, VPN, hardening baselines |
| Risk & compliance | IT risk register, BNR/NCSA advisory response, attestation, ISO 27001-aligned controls |
| IR / CSIRT | Playbooks, evidence handling, stakeholder reporting |
| Automation | Python for log analysis, IOC extraction, and defensive reporting |
Hands-on labs with synthetic data only:
| Repository | Purpose |
|---|---|
| soc-siem-labs | Wazuh lab architecture, detection rules, sample alerts, IR procedure |
| network-security-labs | Lab diagrams, firewall/VLAN/VPN hardening notes, troubleshooting |
| vulnerability-assessment-labs | Authorised-lab findings, remediation, parser script |
| cybersecurity-python-tools | Log analysis, IOC extraction, security report generator |
| secure-coding-labs | OWASP-aligned secure coding: parameterized queries, XSS encoding, password hashing, SAST |
| reverse-engineering-labs | Binary formats, Ghidra/GDB labs, YARA, benign sample only |
| Repository | Purpose |
|---|---|
| soc-security-operations-center | SOC operating model, triage playbooks, KPIs |
| csirt-incident-response | CSIRT playbooks and evidence handling |
| blue-team-defense-operations | Hardening, hunting, vulnerability management |
| php2shell-advisory-response | PHP2Shell inventory / patch / Wazuh hunt mapping (no host list) |
| pki-public-key-infrastructure | CA governance and certificate lifecycle |
| data-protection-dpo-program | DPIA, breach notification, GDPR/local DP |
| senior-manager-cybersecurity-risk-compliance | Unit operating model and risk-register method |
| msit-masters-in-it | University of Kigali MsIT course workspace |
- Certified Ethical Hacker (CEH) — EC-Council
- Sophos Firewall Certified Administrator (CT80)
- Cisco Certified Network Associate (CCNA)
- Master of Science in Information Technology (MsIT) — University of Kigali (in progress)
- Lab and portfolio material is written so a recruiter can clone and read it without a production VPN.
- Internal programme evidence stays in private repositories.
- I do not publish exploit code, customer data, or live firewall/SIEM configs.
GitHub: Gitsimbanyi2