AWS Security Specialty certified professional who monitors threats, responds to incidents, and builds detection workflows.
I built the entire security posture for multiple SME clients from nothing: monthly assessments, IDS deployment, incident response procedures, endpoint protection. Zero security incidents since the audit.
Before that, I recovered a client from ransomware without paying a cent. Restored critical systems under pressure. Trained non-technical staff to recognize phishing.
I train on TryHackMe and HackTheBox to stay sharp. SOC Level 1 & 2 certified, completed the HTB SOC Analyst path. The work is real: Splunk queries, MITRE ATT&CK mapping, log analysis, malware triage.
"name": "Lewis Sawe", "location": "Kenya (UTC+3)", "clearance": "AWS Security Specialty", "threat_level": "to adversaries: HIGH", "focus": [ "Threat Detection", "Incident Response", "Cloud Security", "Network Defense" ], "status": "ACTIVE"
Won Incident Response category. Full observability: Prometheus, Grafana, Alertmanager. 0% error rate at 500 concurrent users. Complete runbook and failure mode docs.
Security lead on 6-person team. Threat modeling, secure architecture, secrets management, CI/CD security review.
Security monitoring and protection system. Automated threat detection and alerting.
Infrastructure security scanning, policy-as-code, compliance automation.
Automated containment and isolation for compromised systems.
Structured IR procedures for SOC teams. Standardized response playbooks.
Open to SOC Analyst, Security Engineer, and Cybersecurity roles.