Jack Okotto

Cybersecurity Engineer with 4+ years in SOC environments, specialising in detection engineering, SIEM/EDR/NDR administration, and incident response. Translates threat intelligence into MITRE ATT&CK-aligned detections across on-premises and cloud. Proficient in Splunk, ArcSight, CrowdStrike, Wazuh, Darktrace, and Python automation.

Cybersecurity Engineer (SOC) - Diamond Trust Bank Group, Kenya - Kenya

(2024-01)

• Administer and optimise enterprise SIEM, EDR, and NDR platforms enabling continuous threat detection across on-premises and cloud environments
• Engineer and tune detection use cases for lateral movement, data exfiltration, insider threats, malware, and cloud-based attacks aligned to MITRE ATT&CK
• Onboard enterprise log sources to SIEM, enforcing security logging standards and collaborating with threat hunters to reduce false positives

Cybersecurity Analyst - Diamond Trust Bank Group, Kenya - Kenya

(2021-02 - 2023-12)

• Monitored SIEM, DAM, EDR, and NDR platforms for IOCs and suspicious activity across on-premises and cloud environments
• Conducted threat investigations and log analysis to identify attack sequences, adversary behaviours, and actionable IOCs using threat intelligence feeds
• Supported end-to-end incident response — triage, containment, endpoint isolation, IOC extraction, IP blocking, and executive reporting

BSc - Telecommunications - Strathmore University

Diploma - Information Security & Ethical Hacking - IST