Alex Irungu

SOC Engineer with 7+ years of experience across banking and telecommunications environments, specializing in security operations, network security, incident response, and threat detection engineering. Proven ability to lead and mentor analysts, manage enterprise security platforms (SIEM, XDR, NDR), and improve detection and response capabilities in high-availability 24/7 SOC environments. Experienced in aligning security operations with regulatory frameworks including CBK Cybersecurity Guidelines and the Kenya Data Protection Act.

Currently pursuing CISSP certification.

Security Operations Centre Engineer - Equity Group Holdings PLC - Nairobi, Kenya

(2023-12 - 2026-01)

• Lead SIEM (LogRhythm), Darktrace, and Database Activity Monitoring operations ensuring high availability and optimized performance
• Integrated CrowdStrike XDR with Darktrace, enabling automated response actions across endpoints
• Collaborated with vendors to onboard and normalize log sources, improving visibility across enterprise systems
• Integrated various network security tools with the SIEM to ensure better threat detection
• Developed and enhanced detection rules through purple team exercises aligned with emerging threats
• Conducted system health checks and ensured continuous log collection integrity across platforms
• Mentored junior engineers and supported analysts during incident investigations
• Contributed to improving detection coverage across enterprise systems and reduced alert fatigue through rule tuning and correlation enhancements
• Improved alert triage efficiency by streamlining SIEM correlation rules and reducing false positives
• Supported incident response coordination for high-severity incidents, contributing to faster containment and recovery times
• Contributed to security reporting for internal stakeholders, translating technical findings into actionable insights
• Played a key role in the rollout of LogRhythm SIEM across the Group, improving centralized visibility of security events
• Successfully integrated XDR and NDR platforms to enhance automated threat response capabilities
• Improved detection capability by enhancing SIEM rule sets and onboarding additional log sources
• Contributed to reducing response times (MTTR) by 18% by enabling automated endpoint containment actions

Senior Cyber Security Officer - Safaricom PLC - Nairobi, Kenya

(2023-01 - 2023-12)

• Operated within a high-volume 24/7 SOC environment handling real-time security monitoring
• Performed incident triage, validation, and escalation under strict SLA requirements, consistently meeting response timelines
• Maintained high alert handling efficiency within a high-volume SOC environment, ensuring minimal backlog
• Acted as a key point of contact for security incidents and coordinated with Tier 2/3 teams
• Documented incidents and contributed to continuous SOC process improvements
• Supported rapid detection and response efforts within a large-scale telecom infrastructure

IT Security Analyst (L1) - Diamond Trust Bank Kenya Ltd - Nairobi, Kenya

(2020-11 - 2023-01)

• Investigated security incidents and supported incident response across multiple regional subsidiaries
• Developed threat intelligence artifacts including IOCs and TTPs for SIEM rule creation
• Supported red team engagements and penetration testing exercises
• Monitored security posture across DTB Kenya, Uganda, Tanzania, and Burundi
• Generated detailed reports on threats, vulnerabilities, and security incidents
• Helped prevent data leaks and brand abuse incidents across multiple countries, protecting organizational reputation
• Strengthened threat intelligence capabilities by contributing to a shared IOC database used for proactive detection
• Contributed to development of a large IOC database shared on AlienVault OTX
• Supported onboarding of multiple enterprise security solutions and SIEM tools

IT Consultant (Internship) - IT Precision Africa - Nairobi, Kenya

(2018-07 - 2019-12)

• Advised clients on IT infrastructure and security improvements
• Supported implementation of enterprise solutions and process optimization

Bachelor of Science - Information Systems & Technology (Forensics) - United States International University