Deborah A.

I am a dynamic Cybersecurity Analyst with a background in technical expertise and a deep specialization in Defensive Security (SOC Operations, DFIR, Malware Analysis, Vulnerability & Risk Assessment and Threat Intelligence). Proficient in managing complex security environments using Virtualbox, Kali Linux, Ubuntu and an extensive suite of industry-standard tools including Splunk, IBM QRadar, Burpsuite, Metasploit, Carbon Black, Microsoft Sentinel and more. Expert in mapping adversary behavior to the MITRE ATT&CK® framework and dedicated to proactive threat hunting and vulnerability management to secure enterprise infrastructures and assets.

Lead Cybersecurity Instructor at Cephas ICT Hub (2025-01 – Present)

• Designed and delivered comprehensive cybersecurity training programs to 100+ students across both online and in-person formats, covering foundational to intermediate concepts including network security, ethical hacking, SOC operations, and threat analysis.
• Developed structured curricula, hands-on lab exercises, and real-world case studies to bridge the gap between theoretical knowledge and industry-ready skills.
• Mentored and coached students through certification preparation and career readiness, with a track record of producing graduates who have gone on to become cybersecurity trainers and facilitators themselves.
• Adapted instructional delivery across virtual and physical classroom environments to maintain high engagement and learning outcomes for diverse student cohorts.
• Evaluated student progress through assessments, practical exercises, and feedback sessions, continuously refining course content to reflect current industry threats and tools.

SOC Analyst at Girls in Security Operations Community (GiSOC) (2025-03 – Present)

• Conducted end-to-end phishing email analysis by examining Google message headers, MX Toolbox, and other header analysis tools to identify spoofed senders, malicious links, and social engineering tactics across reported email samples.
• Performed log and packet analysis using Wireshark, Tshark, and NetMiner to capture and dissect network traffic, identifying anomalous communication patterns, C2 beaconing, and data exfiltration indicators; supplemented findings with Splunk queries and manual analysis in Excel for structured correlation.
• Executed Digital Forensics and Incident Response (DFIR) investigations leveraging Volatility for memory forensics, Autopsy for disk and file system analysis, and Linux/Windows forensic methodologies to reconstruct attack timelines and recover artefacts from compromised systems.
• Carried out static and dynamic malware analysis using PEStudio, Flare VM, Regshot, and Registry Editor to examine suspicious binaries, identify behavioural indicators, and document malware capabilities including persistence mechanisms, registry modifications, and network communications.
• Contributed to risk and vulnerability management activities, supporting the identification, classification, and prioritisation of vulnerabilities across systems in alignment with industry frameworks and risk scoring methodologies (e.g. CVSS).
• Gathered and processed threat intelligence from multiple open-source platforms including PhishTool, AbuseIPDB, Shodan, WHOIS, and IPInfo to enrich investigations, profile threat actors, and correlate IOCs across active incidents.
• Produced detailed investigation reports and technical documentation, translating complex forensic and threat findings into clear, structured reports suitable for both technical and non-technical stakeholders.
• Delivered presentations on security topics and investigation outcomes within the community, developing the ability to communicate threat narratives, risk posture, and remediation recommendations effectively to varied audiences.

SOC Analyst at Cyblack (2024-10 – 2025-01)

• Managed and maintained a SOC home lab with various tools like pfsense, windows server, sysmon, virtualbox and crowdsec for hands-on experience.
• Conducted dynamic and static malware analysis using tools like Anyrun, flakenet, PEStudio, Process Hacker, Regshot, Fiddler, Procmon and Wireshark to enhance malware analysis skills. Built a Malware Analysis Lab
• Implemented and configured Splunk Enterprise on Kali for efficient log analysis, improving threat detection and response capabilities.
• Learnt Threat intelligence (Virustotal, AbuseIPDB, Urlhaus, Shodan, Hybrid analysis, whois etc)
• Configured a Vulnerability management lab using Nessus on Kali
• Learnt Networking and Network Security Solutions (IDS/IPS, EDR, Antivirus, SIEM, Firewalls, etc)

Junior Cybersecurity Engineer at CyberSOC (2024-06 – 2024-09)

• ArcSight and IBM QRadar for SIEM log correlation and threat detection across enterprise endpoints and network infrastructure.
• Conducted endpoint threat investigations and incident response using CrowdStrike Falcon, Carbon Black, and SentinelOne, identifying and containing malware, unauthorized access attempts, and suspicious process executions.
• Utilized Cynet and Rapid7 for vulnerability assessment and automated threat response, contributing to the reduction of mean time to detect (MTTD) and mean time to respond (MTTR).
• Supported deployment and tuning of Trend Micro security policies across endpoint environments, reducing false positives and improving alert fidelity.
• Assisted in writing and refining detection rules, correlation queries, and playbooks to improve SOC response workflows and operational efficiency.
• Participated in threat hunting exercises, analyzing IOCs (Indicators of Compromise), TTPs (Tactics, Techniques, and Procedures), and mapping findings to the MITRE ATT&CK framework.
• Collaborated with senior analysts on escalated incidents, producing detailed incident reports and post-mortem documentation to support continuous security improvement.

Cybersecurity Analyst at Tech4Dev (2023-10 – 2024-10)

• Footprinting
• Vulnerability Assessment
• OWASP 10
• Nmap
• Linux Commands
• Network Defense
• Threat & Vulnerability Management
• Access controls
• Cloud Security
• Endpoint Security

Master of Information Technology in Cybersecurity – Miva Open University (2026-04 – 2027-04)

Bachelor of Technology in Computer Engineering – Ladoke Akintola University of Technology (LAUTECH) (2019-09)