Caroline Kariuki

Cybersecurity professional with hands-on experience in security operations, vulnerability management, cloud security, secure software development, and risk governance. Skilled in identifying and mitigating security risks through SIEM monitoring, incident response, vulnerability assessments, threat detection, and secure architecture practices aligned with NIST CSF, ISO 27001, CIS Controls, OWASP Top 10, and MITRE ATT&CK frameworks. Experienced in securing cloud and on-premise environments, implementing DevSecOps controls, conducting security assessments, and collaborating with cross-functional stakeholders to strengthen organizational security posture.

Holds

CompTIA Security+ certification with practical experience in Splunk, Wazuh, AWS security, Active Directory, Python automation, and security-focused CI/CD pipelines.

Cybersecurity & Full-Stack Engineering Associate - Tytos GmbH - Remote (Germany)

(2025-01 - 2026-06)

• Engineered automated security gates within CI/CD pipelines using Git, Jenkins, and Bash, reducing manual security review time by 38% and accelerating secure deployments across 7 microservices.
• Conducted secure code reviews and vulnerability assessments against the OWASP Top 10, identifying and remediating 23 critical logic flaws before production release.
• Developed Python and Rust automation scripts to collect threat indicators in real time and generate incident reports, improving SOC analyst response time from 45 minutes to 18 minutes on average.
• Led system hardening and access control audits across cloud and on-premise infrastructure, aligning configurations with ISO 27001 Annex A controls and internal data protection policies.
• Built and maintained secure REST APIs using Python and JavaScript, enforcing input validation, authentication, and rate limiting to mitigate injection and brute-force attacks.
• Authored 14 internal knowledge-base articles and runbooks covering incident triage, secure coding standards, and identity management procedures.
• Partnered with engineering and operations stakeholders to design and deploy secure cloud infrastructure on AWS, including IAM policies, encryption at rest and in transit, and CloudTrail logging.

Data Analyst, Operations & Capacity Building - CBN Kenya - Nairobi, Kenya

(2021-07 - 2024-12)

• Analyzed organizational and program data to identify operational gaps and trends, supporting evidence-based decisions across 4 business units.
• Designed Power BI and Tableau dashboards that reduced executive reporting time by 32% and improved data clarity for senior management.
• Streamlined office workflows through process automation, improving operational efficiency by 22% and cutting manual reporting effort by 15 hours per month.
• Defined and tracked program KPIs, ensuring 100% compliance with donor and regulatory reporting requirements across 9 grant cycles.
• Conducted capacity needs assessments and delivered training programs to 120+ staff, strengthening data literacy and reporting consistency.

Underwriting & Risk Analyst - Vike Insurance Brokers - Nairobi, Kenya

(2019-01 - 2021-05)

• Performed risk assessments and actuarial data analysis on commercial insurance portfolios, reducing underwriting errors by 17%.
• Managed end-to-end project lifecycles using Agile and Waterfall methodologies, maintaining a 94% on-time delivery rate across 11 client engagements.
• Developed risk registers and mitigation plans that improved operational risk management for 3 enterprise accounts.
• Built and maintained client relationships, supporting proposal development, retention, and cross-selling of insurance products.

Supply Chain & Operations Analyst - Simmonds Cargo Ltd - Nairobi, Kenya

(2016-04 - 2018-03)

• Optimized inventory and logistics workflows, reducing lead times by 19% and improving delivery accuracy by 14%.
• Implemented quality assurance frameworks that decreased systemic process failures by 28%, strengthening operational resilience.

Cybersecurity & Software Engineering Program - Moringa School (2025)

Bachelor of Science - Environmental Science - Kenyatta University (2014 - 2018)