Goodness Caleb Ibeh Email & Phone Number

Prague, Czechia

Building great stuff

Nairobi, Ke

Responsible for Detection Engineering and Incident Response for M-KOPA globally (Kenya, Uganda, South Africa, Ghana, Nigeria, United Kingdom). Threat Detection and Response: 🟢 Utilize KQL (Kusto Query Language) to craft complex queries for advanced threat hunting and security incident investigation within Microsoft Defender for Endpoint, Cloud, Identity, and Office365. 🟢 Design and implement high-level custom detection rules to proactively identify potential security threats and vulnerabilities in the Microsoft Defender environment. 🟢 Continuously monitor and analyze security alerts in Sentinel XDR, effectively escalating and responding to security incidents according to established protocols. 🟢 Collaborate with the third-party Security Operations Center (SOC) by investigating and responding to security incidents reported through ticketing systems. Security Awareness and Compliance: 🟢 Conduct security awareness training sessions or workshops for internal staff, fostering a culture of security consciousness and best practices. 🟢 Address security policy violations by initiating appropriate corrective actions and educating staff on the importance of adherence to security policies. Security Automation and Integration: 🟢 Designed, developed, and deployed a Python application to automate the integration between Microsoft Defender Vulnerability Management API and First.org API. The application fetches Exploit Prediction Scoring System (EPSS) and percentile scores for exploitable CVEs, enhancing security decision-making and prioritization. Implemented the application on Azure DevOps for streamlined deployment and management. Device Security and Identity Protection: 🟢 Manage device security and identity protection using Microsoft Defender and Intune, including conducting UEBA analysis and performing device and software upgrades using PowerShell.

• Efficiently managed and maintained the JumpCloud Directory Service, ensuring seamless user identity management and access control.• Successfully deployed and configured agents/sensors for a wide range of enterprise security and monitoring solutions, enhancing the organization's threat detection and prevention capabilities.• Oversaw the Mobile Device Management (MDM) system, ensuring secure mobile device usage and compliance with company policies.• Effectively managed user accounts, groups, and domain identities within the Azure Active Directory, ensuring proper access controls and user privileges.• Proficiently administered Microsoft 365, including Office and Exchange, to optimize productivity and collaboration for the organization.• Implemented and managed EDR solutions to proactively detect and respond to endpoint security threats, minimizing the impact of security incidents.• Managed and maintained Microsoft 365 Defender for Endpoint and Office, ensuring robust protection against cyber threats and efficient incident response.• Proactively monitored and responded to security alerts and incidents, minimizing potential damage and data breaches.• Developed and implemented compliance policies, ensuring adherence to industry standards and regulatory requirements.• Conducted thorough security testing for mobile and web applications, identifying and addressing vulnerabilities to safeguard sensitive data.• Implemented and managed email security - protecting the organization from email-based threats, including phishing and malware.• Conducted security awareness training programs for employees, educating them on best practices and security protocols.• Executed phishing simulations to assess and enhance employees' ability to recognize and respond to phishing attempts.

Lagos, Ng

• Led the Security Operations Center (SOC) with expertise in triaging and analyzing security events and incidents.• Utilized various security tools and platforms, including Alienvault Appliance (SIEM), ELK Stack (Elasticsearch, Kibana, Beats & Logstash), McAfee ePO, McAfee DAM, AlgoSec Firewall Analyzer, AppTrana WAF, Forescout NAC, Sentinel One (XDR), NNT - File Integrity Monitoring, for effective threat detection and response.• Conducted threat intelligence research and analysis to stay ahead of evolving cybersecurity threats.• Utilized threat intelligence to enhance security measures and incident response procedures.• Analyzed and dissected phishing attacks to identify tactics and methods employed by attackers.• Developed countermeasures and provided recommendations to mitigate the risk of phishing incidents.• Orchestrated incident response procedures to effectively address and mitigate security incidents.• Ensured timely and efficient incident resolution, minimizing potential damage.• Implemented SMTP encryption for enhanced email security.• Managed and controlled email spamming using SpamTitan, safeguarding the organization's email communications.• Conducted Static Application Security Testing (SAST) using Checkmarx to identify and rectify security vulnerabilities in applications.• Performed Dynamic Application Security Testing (DAST) using Burp Suite to evaluate the security of web applications.• Installed, set up, and troubleshooted Thales Hardware Security Modules (HSM) for the SmartVista payment switch, ensuring secure transaction processing.• Conducted vulnerability assessments using OpenVAS and Tenable, identifying and prioritizing vulnerabilities for remediation.• Analyzed and provided recommendations for new projects and business solutions through the preparation of comprehensive Business Requirements Documents (BRDs).

Lagos, Lagos, Ng

• Evaluate threats against critical organizations in banking, telecommunications and financial technologies and initiate escalation of immediate threats with clients when necessary.• Provide recommendations and administer the updating of rules and signatures; such as intrusion detection/protection systems, firewalls, endpoint protection systems, SIEM and DLP rule policy changes, to improve system monitoring and reporting• Utilizing an enterprise centralized log/event correlation solution for security investigations and auditing employee behaviour (ArcSight, QRadar, Alienvault, VMWare Carbon Black, Cylance, Microsoft Defender Advanced Threat Protection (ATP) & RSA Netwitness)• Investigate security events (e.g., unauthorized access, non-compliance with company policies, service exploitation, etc.) to determine malfunctions, breaches, and remediation steps• Assist in Information Security Incident Response and Threat Hunting activities for large organisations as a 1st line security analyst to identify various malicious threats in enterprise environments.• Ensure organizational compliance with industry standards like PCI DSS and ISO• Facilitate several training sessions for information security interns.• Built and implemented a shift reporting system for SOC analysts, using Microsoft PowerApps, thereby improving handover processes.

Lagos, Lagos, Ng

- Design and manage all websites for the company and it's subsidiaries, and also build client websites. - Design graphic material for all the subsidiaries- provide additional IT support.

- Design and manage the hospital's website - Design graphic material for all of the hospital's health programs and awareness campaigns - provide additional IT support.

- Design and manage all websites for the company's 8 subsidiaries- Design graphic material for all the subsidiaries- provide additional IT support.- Design and manage all websites for the company and it's subsidiaries, and also build client websites. - Design graphic material for all the subsidiaries- provide additional IT support.