Skip to content
Eddie Mwangi

About

Eddie Mwangi

My interest in cybersecurity started with the culture surrounding hacking: the curiosity, problem-solving, and idea that a system can behave very differently from what its creator intended. What first attracted me was the challenge of understanding how things could be broken, bypassed, or manipulated. As I spent more time in security labs, CTFs, and vulnerable applications, that curiosity became practical. I became less interested in the image of a hacker and more interested in the systems underneath it.

That shift changed how I approach security. I am not only interested in finding a way into a system; I want to understand the technology, assumptions, trust boundaries, and controls that made the weakness possible. Working through web applications, APIs, networking labs, and controlled security exercises has taught me to think in terms of attack paths, root causes, evidence, and impact rather than isolated tool output. Penetration testing is my current career direction, with web and API security as the area I am developing most deeply.

My academic foundation is a Bachelor's degree in Computer Security and Forensics. It gave me a grounding in information security, networking, operating systems, digital forensics, and the principles of investigating digital evidence. During my industrial attachment at Kenya Power (KPLC), I gained exposure to a professional ICT environment and saw how security concepts operate within a real organization. That experience reinforced the importance of reliable systems, controlled access, technical documentation, and responsible handling of information.

Today, I am deliberately building depth through hands-on labs, penetration-testing practice, technical writeups, and practical cybersecurity training. I want this portfolio to show the work behind the claims: what I investigated, how I approached it, what I learned, and where my current limits are.

Direction

The road to purple team

This is where I'm heading, not a claim about where I already am.

  1. Offensive
    2. →
  2. Web / API
    3. →
  3. Network
    4. →
  4. Defensive understanding
    5. →
  5. Forensics
    6. →
  6. Threat intelligence
    7. →
  7. Purple team

Journey

Where this has come from so far

  1. 2025–2026

    AfricaHackon

    Cybersecurity Trainee

    Nairobi, Kenya

    Completed an intensive six-month practical cybersecurity training program focused on offensive and defensive security, hands-on labs, and collaborative security challenges.

    • Performed reconnaissance and information gathering on target environments
    • Conducted system and service enumeration using industry-standard tools
    • Identified and validated security vulnerabilities in controlled lab environments
    +7 more
    • Executed exploitation techniques in safe, isolated environments
    • Performed web application security testing and assessment
    • Applied penetration testing methodologies and frameworks
    • Worked with Linux security environments and hardening practices
    • Analyzed networking fundamentals and protocols
    • Produced technical documentation and security reports
    • Collaborated on team-based security challenges
    Kali LinuxBurp SuiteNmapMetasploitWireshark
  2. 2023–2023

    Kenya Power and Lighting Company (KPLC)

    Security Operations Intern / ICT Attachment, Information Security Department

    Nairobi, Kenya

    Industrial attachment in the Information Security Department: SIEM alert triage, vulnerability scanning and access reviews, alongside general enterprise ICT support.

    • Monitored security alerts and performed initial triage on SIEM-generated incidents, classifying severity and validity before escalating confirmed threats to senior analysts
    • Executed alert validation workflows to reduce false-positive noise for the incident response team
    • Conducted vulnerability scans and documented findings with CVSS scoring and remediation guidance for IT teams
    +4 more
    • Performed user access reviews and entitlement audits to enforce least privilege
    • Administered user accounts and permissions; applied software updates and security patches
    • Troubleshot hardware, software and network connectivity issues across departments
    • Maintained technical documentation and incident logs
    SIEMVulnerability ScanningAccess ReviewsWindows ServerActive Directory

Skills

Skills, with the evidence

Each claim links to the page that backs it up, with its limits stated.

Certifications

Verified credentials