Meg Atieno

During my tenure as a trainee at Cybersafe Foundation, I participated in identifying and notifying security events within the Azure cloud environment using cloud native tools demonstrating my commitment to real-world cloud security practices and threat management.

Collaborated on a project in highlighting the importance of compliance and regulatory considerations in cloud security, drawing attention to how rules and laws impact security in the cloud and practical steps that can help improve cloud security compliance.

• Gained in-depth understanding of networking including networks types, how networks operate, network components, network addressing using ipv4 and ipv6 addresses
• Acquired knowledge in different networking concepts such as OSI model, TCP/IP, dynamic addressing and static addressing using DHCP, Ethernet, MAC addresses, ARP, UDP and subnetting Using Cisco packet racer, I learnt how to configure a LAN network, configured end devices to enable connectivity and allow communication, using networking commands to observe traffic flow and viewing host information
• Gained knowledge in cybersecurity principles, security countermeasures such as firewalls, IDS/IPS, encryption, defense-in -depth, account management, hashing and access controls
• Acquired knowledge in Windows Operating system, Active Directory and Linux system administration
• Analyzed network traffic using Wireshark
• Acquired knowledge in identity and Access management (IAM); models of access control, single sign on, federation, zero trust, passwords and multifactor authentication
• Acquired knowledge in vulnerability assessment using a variety of tools such as CVE and CVSS scoring system
• Evaluated Cybersecurity Intelligence reports from OSINT sources and the Cybersecurity and Infrastructure Security Agency(CISA) website to identify new emerging cyber threats
• Developed cybersecurity policies that addressed vulnerabilities identified in a case study scenario of a healthcare company that experienced a data breach and lost sensitive data
• Collaborated on a group project that involved developing an incidence response plan for case study of a company that suffered a data breach
• Came up with steps the company should implement to mitigate damage and prevent future breaches from occurring