Mburu Karanja
Security Analyst and Consultant, VAPT, Blue Team, Threat Detection & Incident Response, CTF Player
Nairobi
Summary
Security Analyst with experience in SOC operations, SIEM monitoring, and incident response. Skilled in alert triage, log analysis, and network security using tools such as IBM QRadar, Microsoft Sentinel, and Wazuh. Strong background in CTF competitions, cybersecurity community leadership, and hands-on threat detection and response.
Overview
3
3
years of professional experience
10
10
Certifications
Work History
Cybersecurity & Network Security Consultant
Bitbiz Consulting and Services
Nairobi
10.2025 - Current
- Performed vulnerability assessment and penetration testing (VAPT) on network and application environments
- Supported implementation of secure transaction systems using IBM Safer Payments
- Monitored threats and analyzed security logs using IBM QRadar.
- Configured and managed FortiGate firewalls (100F, 121G), FortiWiFi access points (30G, 50G) and Cisco switch.
- Assisted in validating security controls across network infrastructure
- Award winner in a technical challenge at VeeamUnplugged 2025 (Kenya).
Founder & Community Lead
Cyber Chief Circle
Nairobi
02.2025 - Current
- Founded and lead a multi-campus cybersecurity community spanning 26+ institutions across Kenya.
- Organized inter-campus workshops and CTF events, promoting collaboration, technical growth, and awareness of cybersecurity best practices.
- Built partnerships to promote cyber literacy and incident response skills among university students.
- Managed communication, planning, and coordination across all campuses.
CTF player & Team Member
fr334aks-mini (CTF Team)
Kenya
06.2024 - Current
- Compete weekly in international CTFs across Web, Forensics, Pwn, and Crypto challenges.
- Contributed to maintaining top rankings for Kenyan teams on CTFtime.
- Developed strong skills in threat analysis, reverse engineering, and exploit development under high-pressure competition settings.
- Authored and maintained CTF challenges across multiple categories including web security, forensics, and reverse engineering.
Cybersecurity Virtual Scholarship Intern
Cyber Secured India
09.2024 - 11.2025
- Completed a hands-on internship focused on web and mobile security, vulnerability assessment, and digital forensics.
- Configured SIEM rules and documented incident response workflows for simulated SOC environments.
- Produced detailed incident reports and risk assessments under mentorship from cybersecurity experts.
- Wrote incident reports and risk assessments based on security events.
Cybersecurity Student Lead & GDGoC Cybersecurity Lead
Zetech University
Nairobi
04.2024 - 09.2025
- Led weekly cybersecurity learning sessions simulating alert triage, network forensics, and incident response.
- Organized national CTF events with 130+ participants and Hack Nights fostering collaboration among blue team enthusiasts.
- Created training content and helped grow the GDGoC community by 48%.
- Mentored new students in cybersecurity basics, tools, and problem solving.
Mentor
H4K-IT Community
Tanazania
05.2025 - 08.2025
- Guided participants through SOC fundamentals, emphasizing threat detection, escalation, and response.
- Promoted collaboration between security and network operations teams for holistic defense strategies.
Education
Bachelors of Science - Information Technology
Zetech University
11.2025
Skills
- IBM Qradar
- Wazuh
- Microsoft Sentinel
- Alert triage
- Incident response
- Log analysis
- IOC tracking
- IAM
- RBAC
- Access reviews
- Vulnerability
- Leadership
- Team Collaboration
- Knowledge Sharing
- Wireshark
- Nmap
- Clear Communication
- Incident Reporting
- Fortigate Firewall
- Cisco
- VAPT
- Triage & remediation tracking
- File analysis
- CTF-level forensics
- Python Scripting
- Bash
- IBM Safer Payment
Certification
- SOC Fundamentals - Microsoft
- Security Engineer - CyberShujaa (Microsoft ADC)
- Fortinet Security Associate - Fortinet
- Bitdefender Certified Technical Specialist- Bitdefender
- Cyber Job Simulation - Deloitte (Forage)
- Blue Team Junior Analyst - Security Blue Team
- Microsoft Certified SC-900
- Cisco Certified Network Associate (CCNA)
- Guardium Data Security Center Technical - IBM
- Certified Ethical Hacker - Cisco Academy
- Veeam Professional VMSP - Veeam University
- Verify Identity Protection - IBM
- Cyber Threat Intelligence 101 - arcX
- Fortinet Cybersecurity Associate- Fortinet
- Cyber Threat Management - Cisco Academy
- OPSWAT Associates Certification
- Career Essentials in Generative AI - LinkedIn
- Cloud Service Computing - Huawei
- Cybersecurity & Forensics Ethics - KCSFA
- Software Engineering - Power Learn Project
- ISO/IEC 27701:2025 - Mastermind
- Fortinet NSE 1-4 -Fortinet
Awards
- 2nd Runners-Up CyberSensei-EH CTF 2026 - Multimedia University
- International Cyber Conference 2026 CTF Author
- 1st Runners-Up - Cyber Week Africa 2025
- 1st Runners-Up - Safaricom Pwnzone CTF 2025
- 1st Runners-Up - Microsoft ADC CTF 2025
- 1st Runners-Up - WorldSkills Kenya Cybersecurity Track 2024
Timeline
Cybersecurity & Network Security Consultant
Bitbiz Consulting and Services
10.2025 - Current
Mentor
H4K-IT Community
05.2025 - 08.2025
Founder & Community Lead
Cyber Chief Circle
02.2025 - Current
Cybersecurity Virtual Scholarship Intern
Cyber Secured India
09.2024 - 11.2025
CTF player & Team Member
fr334aks-mini (CTF Team)
06.2024 - Current
Cybersecurity Student Lead & GDGoC Cybersecurity Lead
Zetech University
04.2024 - 09.2025
Bachelors of Science - Information Technology
Zetech University