Hire the Best Information Security Analysts
in Nigeria

With over 3 years of experience in cybersecurity, I specialize as a SOC Analyst and Penetration Tester and Cloud Security Engineer/Analyst focusing on the early detection and response to security incidents. My role involves monitoring network traffic, analysing security alerts, and managing incident tickets to ensure rapid resolution of potential threats. My analytical skills, combined with a strong ability to communicate and collaborate with various teams, enable me to effectively safeguard systems and respond to evolving cyber threats.

Are you preparing for ISO 27001 certification, struggling with GDPR compliance, or looking to strengthen your organization’s risk and compliance program? I help businesses design, implement, and manage effective Governance, Risk, and Compliance (GRC) frameworks that satisfy regulators, auditors, and stakeholders. With proven experience in the financial services sector, I’ve successfully: Conducted risk assessments and built comprehensive risk registers. Designed and implemented ISMS documentation aligned with ISO 27001. Led internal audits and coordinated with cross-department teams to close compliance gaps. Developed policies covering Information Classification, Incident Management, Access Control, Clear Desk/Clear Screen, Threat Intelligence, and more. Ensured GDPR compliance by creating data protection processes and training staff. 💡 What I can do for you: ISO 27001 & GDPR compliance gap assessments Policy & procedure development (ISMS, vendor risk, access management, incident response) Risk assessment frameworks and templates Audit readiness support (internal/external) Vulnerability management Ongoing GRC advisory and reporting ✅ My approach is practical, clear, and business-oriented ,not just paperwork. I’ll help you build compliance systems that actually work for your business, not against it.

I help businesses identify security risks, improve application quality, and strengthen access controls before issues become costly. My focus is on practical testing, clear documentation, and actionable recommendations that help teams ship secure, reliable products. I’ve worked across web application security, API testing, identity and access management (IAM), Microsoft 365, Microsoft Entra ID, Azure, Google Workspace security, vulnerability assessments, and AI evaluation projects. Whether it’s reviewing authentication flows, testing APIs, validating business logic, or improving software quality through structured QA, I approach every engagement with attention to detail and a security-first mindset. ✅ Cybersecurity Services Web Application Security Testing (OWASP Top 10) REST API Security Testing Authentication & Authorization Reviews IDOR & Business Logic Testing Microsoft Entra ID & Microsoft 365 Security Google Workspace Security Reviews Identity & Access Management (IAM) Security Hardening & Best Practice Reviews Vulnerability Assessment & Reporting Security Documentation & Remediation Guidance ✅ QA Testing Manual Web & Mobile Testing Functional & Regression Testing API Testing (Postman) Exploratory Testing Cross-Browser Testing User Acceptance Testing (UAT) Bug Reporting with Clear Reproduction Steps Test Case Creation & Execution Release & Patch Validation ✅ AI & Data Quality AI Response Evaluation Prompt Evaluation Annotation & Data Labeling Rubric-Based Quality Assessment Technical Research & Documentation 🛠️ Tools Burp Suite Postman Microsoft Entra ID Microsoft Azure Microsoft 365 Admin Center Google Workspace Admin OWASP ZAP Nmap GitHub Jira Trello Linux PowerShell Browser Developer Tools Why Clients Like Working With Me Clear and responsive communication Practical, business-focused recommendations Well-structured reports and documentation Strong analytical and troubleshooting skills Security-first mindset with attention to detail Reliable delivery and willingness to learn new technologies quickly 📩 If you’re looking for someone who can strengthen your application’s security, validate software quality, or support AI evaluation projects with a structured and detail-oriented approach, I’d be happy to discuss your project.

👨‍💻 Professional Summary I am a dedicated Information Security professional with a proven track record in safeguarding digital assets and ensuring the confidentiality, integrity, and availability (CIA) of sensitive information. With a deep understanding of cybersecurity principles, risk management, and compliance frameworks, I am adept at implementing robust security measures to protect against evolving threats. My expertise spans network security, application security, and data protection, backed by hands-on experience across security operations, engineering, and governance. I excel at collaborating with cross-functional teams, translating complex security concepts into business language, and fostering a culture of awareness and resilience. =================== 🔐 Core Expertise ⚙️ Security Operations & SIEM 🛡️ 2+ years configuring, administering, and deploying SIEM solutions (ArcSight, Splunk, Wazuh, IBM QRadar, Rapid7, Microsoft Sentinel, AlienVault). 🔔 Skilled in creating/tuning alarm rules, developing use cases, integrating log sources, and enhancing detection maturity. 👁️ Proficient in SIEM monitoring, engineering, and identifying Indicators of Compromise (IoCs). =================== 🚨 Threat Detection & Response 🔍 Experienced in incident analysis, forensic investigation, malware analysis, and report writing. ✍🏽 Skilled in log parsing with regex and producing actionable intelligence. 🎯 Strong background in incident handling and proactive threat hunting across enterprise environments. =================== 💻 Endpoint & Cloud Security 🖥️ Skilled with EDR solutions: MDE, Carbon Black, SentinelOne, CrowdStrike Falcon. ☁️ Secured hybrid infrastructures and cloud platforms (AWS & Azure). =================== 🛠️ Security Engineering 🏗️ Strong background in system hardening with CIS Benchmarks & ISO/IEC 27001 controls. 🤖 Experienced in automation of vulnerability remediation, compliance validation, and log enrichment. ⚡ Skilled in deploying/fine-tuning security tools and scripting for monitoring & response. =================== 📑 Governance & Awareness 📝 Developed framework documentation, policies, and procedures. 🎓 Conducted cybersecurity awareness training to build organizational resilience. =================== 🕵🏽 Vulnerability Management & Penetration Testing 🔦 Conducted assessments & exploitation simulations across web, mobile, cloud, networks, APIs, IoT, and wireless infrastructures. 🧑🏽‍💻 Strong foundation in Ethical Hacking using Nessus, Burp Suite, Nmap, Wireshark. =================== 🧾 Forensics & Cyber Investigations 🧩 Digital Forensics: Evidence extraction and analysis for investigations. 🚑 Incident Response: Rapid containment and attack vector identification. =================== 🌐 Network & System Analysis: Detection of unauthorized access and vulnerabilities. =================== 🦠 Malware Analysis: Deep research into code behavior and impact assessment. =================== 🧑🏽‍💻 Additional Technical Skills 🐧 Linux / Windows Administration 📡 Packet Analysis (Wireshark, Packet Tracer) In addition to technical proficiency, I excel in collaborating with cross-functional teams, communicating complex security concepts to non-technical stakeholders, and developing comprehensive security awareness programs. My goal is to create a resilient and secure digital environment by implementing best practices, fostering a culture of security awareness, and adapting to the ever-changing threat landscape.

Businesses (small, medium, and large) all around the world should have that one person that brings value by helping to navigate governance, risk and compliance challenges. THIS IS MY AREA OF EXPERTISE. With almost 3 years of experience creating policies that help to improve the processes of business, I can help you to comply with the ever-evolving regulatory landscape. I believe that compliance should be a lifestyle, making it easier for the people to integrate into daily processes easily using already available tech-solutions that drives day-to-day activities. I also look for innovate ways to ensure standards are implemented seamlessly. I have experience in implementing and helping organizations certify to ISO 27001, 22301 and 20000. I can also assess an organization against requirements of the PCI DSS. I look forward to working with you Upwork says i should keep it short

I am a Senior Cybersecurity/Information Security Analyst with 4 years of professional experience in the SOC field, providing services to leading corporations and medium-sized businesses in various industries. I have developed expertise in the following areas: ✔️Configuring SIEM alarm rules and professional services ✔️With over 2 years of hands-on experience in utilizing industry-leading SIEM platforms such as ArcSight, Splunk, Wazuh, IBM QRadar, Rapid7, Microsoft Sentinel, and Alienvault (Appliance and Anywhere). ✔️Developing use cases to enhance the maturity of the environment. ✔️Expertise in SIEM administration and deployment and integration of log sources. ✔️Cybersecurity incident analysis and report writing. ✔️Writing framework documentation, including policies and procedures, and also writing technical reports. ✔️Training employees on various aspects of Cybersecurity Awareness. ✔️Performing vulnerability assessments and penetration testing. ✔️Parsing logs using regex. ✔️Proficiency with endpoint solutions like (MDE, Carbon Black, SentinelOne, Crowdstrike Falcon) I also specialize in digital forensics and cyber investigation services to uncover the truth behind cyber incidents. I bring: a) Digital Forensics: Expert analysis of digital devices to retrieve critical evidence. b) Incident Response: Swift response to contain breaches and identify attack vectors. c) Network & System Analysis: Identification of unauthorized access and vulnerabilities. d) Malware Analysis: In-depth examination to determine malware nature and impact. Here’s a highlight of the SIEM Tools I have extensive experience working with: - ArcSight - Splunk - Wazuh, - IBM QRadar, - Rapid7, - Microsoft Sentinel, - Alienvault (Appliance and Anywhere) ⭐️ Services: 🔍 Penetration Testing & Vulnerability Assessments 🌐 API Security Assessment ☁️ Cloud Penetration Testing 🌐 Web Application Penetration Testing 📱 Mobile Application Penetration Testing 🏢 Enterprise Network Penetration Testing 🤖 Social Engineering Assessments 📶 Wireless Network Security Testing 🌐 IoT (Internet of Things) Security Assessment I have acquired practical experience using the following tools: security awareness platforms, firewalls like Fortinet, Checkpoint, and Cisco, endpoint protection with MDE, Carbon Black, SentinelOne, Crowdstrike Falcon, ISO 27001, Packet Tracer (Wireshark), vulnerability assessment with Nessus, and web application penetration testing using Nmap and Burp Suite. My expertise is not just theoretical but strongly grounded in real-world applications, ensuring that I bring a practical and impactful approach to all projects. You can trust that my approach is grounded in a commitment to thorough attention to detail and the highest standards of professionalism.