Kehinde
Adetunji

Security Analyst (Contract)

PurpleIris, remote

• Test and validate the company's SIEM against attack scenarios: Windows logon failures, sudo abuse, Kubernetes audit events and Suricata IDS alerts.
• Validated file integrity monitoring, CVE detection, CIS configuration assessment and active response. Defects I reported, including a poisonable FIM baseline, were fixed by the developers.
• Benchmarking the product end to end against Wazuh and documenting every gap for the product team.
• Debug a multi-service Docker stack (ingestion, detection engine, ClickHouse, Redis) from logs and REST API responses.

SIEM, Wazuh, Suricata, Docker, ClickHouse, Python

DevOps Engineer

AzeniQ, United States, remote

• Own Kubernetes version upgrades on the production EKS cluster (1.35 to 1.36), each rolled out through a reviewed merge request.
• Rolled out an Istio service mesh in phases to strict mutual TLS, then added OPA request authorisation through Envoy and Kyverno admission policies.
• Deliver cluster changes GitOps-style with Argo CD and Kustomize, with Karpenter autoscaling, and built GitHub Actions pipelines for ML training and serving.
• Traced an IAM race condition and a KMS error that blocked daily infrastructure builds, fixed both, and wrote the incident reports.

AWS EKS, Terraform, Istio, OPA, Kyverno, Argo CD, Karpenter, GitLab CI

IP Network Engineer

Huawei Technologies, Lagos, Nigeria

• First point of contact for AirtelTigo Ghana and Vodacom South Africa: triaged faults, escalated with evidence and closed cases within SLA.
• Deployed and migrated carrier routing and led incident calls during outages and planned cutovers.
• Automated network health checks with Python and Ansible.

BGP, IS-IS, OSPF, MPLS L3VPN, SR/SRv6, Huawei VRP, Ansible

AI Data Annotator and Evaluator (Contract)

Mercor, remote

Evaluated LLM outputs for accuracy and instruction-following across three AI training projects.

Network Engineering Intern

Huawei Technologies

First hands-on work with carrier-grade routing and Huawei NE routers.

AWS DevSecOps platform

A URL shortener on ECS Fargate and RDS, with secrets in Secrets Manager, SHA-tagged images and blue/green deploys through CodeDeploy, so a bad release can be rolled back without downtime.

ECS Fargate, RDS, Secrets Manager, CodeDeploy, CI/CD

Argus

An AI-assisted web vulnerability scanner that tests against the OWASP Top 10 and verifies each finding before reporting it, to cut false positives.

67 passing tests, validated on OWASP Juice Shop

Python, LLM, Docker

Wazuh SOC lab

A full SOC stack that takes an alert to a case to an automated response: Wazuh SIEM, TheHive, Shuffle SOAR and ModSecurity, plus an offline Wazuh build over Active Directory on Proxmox.

Wazuh, TheHive, Shuffle, Active Directory

Anomaly detection for water treatment control systems

A Raspberry Pi screens plant data and escalates suspicious events to the cloud. I own the cloud autoencoder and the LLM-assisted stage that explains each anomaly to operators. In progress.

ICS/OT, SWaT, WADI, autoencoders, LLMs

PolicyPulse

Kyverno policy enforcement with logs shipped by Fluent Bit to Elasticsearch and an LLM layer that explains each violation in plain language. Built in a team of three.

Kubernetes, Kyverno, Fluent Bit, Elasticsearch

Production SaaS security audit

A private end-to-end review of a live Firebase-backed SaaS, from auth rules to data exposure, delivered as a prioritised report with fixes.

47 findings reported