Open to work

$> hello, world — I'm

Ali Chisom

SIEM Operations

I turn thousands of daily alerts into measured, hardened defense — and I ship the cloud infrastructure that makes it possible.

View the workGet in touch

● Nigeria · Remote-friendly

Ali Chisom — cybersecurity analyst, headshot portrait

// mission

A discipline, not a feature

“I turn thousands of daily alerts into measured, hardened defense — and I ship the cloud infrastructure that makes it possible.”

I'm a cybersecurity analyst with hands-on experience across security operations, incident response, vulnerability management, threat hunting, and cloud infrastructure security — investigating 800+ security alerts each month and leading critical incident response across enterprise environments.

I initiated and led the migration of production infrastructure from outsourced developers to an in-house AWS environment — including MongoDB and domain migration — cutting recurring infrastructure and outsourcing costs by approximately $10,000 annually. My work ships measurable outcomes: mean time to containment down 30%, false positives down 20%, and attack surface down 40%.

// work

Selected projects

A breadth of defensive, cloud, and infrastructure security work, each with a full engineering case study.

View all work
Network Automation

Network Config Script

Open source

A collection of Python/Netmiko automation scripts that configure routers, firewalls, and MPLS/security tunnels at scale, from single-router configs to full BGP, OSPF, EIGRP, DMVPN, and IPSec deployments.

  • Backup multiple router configs to per-device files automatically.
  • Python
  • Netmiko
  • Cisco IOS
  • +6
System Administration

Advanced System Admin Toolkit

Open source

A comprehensive multi-platform administration suite with Windows (76 options) and Linux (72 options) editions, network diagnostics, system repair, security audits, performance tuning, and reporting in a menu-driven interface.

  • 76+ Windows / 72 Linux diagnostic, repair, security-audit, and optimization features.
  • Batch
  • PowerShell
  • Bash
  • +3
Malware Analysis

Malware Analysis Lab

Research

A curated, structured collection of live and reverse-engineered malware samples, detailed analysis reports, and Indicators of Compromise (IoCs) for students, analysts, and reverse engineers.

  • Real-world artifacts to study threat-actor behaviors and multi-stage attack chains.
  • Reverse Engineering
  • YARA
  • FLARE VM
  • +3

// research

Current research

All research
Malware AnalysisHigh

Malware Report: A curated corpus of in-depth malware analyses

A curated collection of in-depth malware family analyses, ransomware, RATs, and PowerShell infostealers, covering static/dynamic analysis, unpacking, persistence, C2 patterns, extracted IoCs, and blue-team detections.

2025 · 30 min read

// experience

Career at a glance

Full timeline
  1. Cybersecurity Analyst · BcKash Cooperative / Microfinance BankCurrent

    Jun 2024 — Present · Nigeria

    Promoted from Junior Cybersecurity Analyst. Leads daily monitoring, detection tuning, incident response, and cloud infrastructure security across the SOC.

  2. Junior Cybersecurity Analyst · BcKash Cooperative / Microfinance Bank

    Sep 2022 — May 2024 · Nigeria

    Vulnerability management, phishing triage, and alert correlation for a Nigerian fintech cooperative.

  3. System and Network Administrator · Phamatex Industries Limited

    Oct 2020 — Aug 2022 · Nigeria

    Systems and network administration for a pharmaceutical company supporting 1,300+ users.

// open source

Public code

Maintainable, public engineering the Technical Lead can audit directly.

GitHub profile
Captaindefensive research

Endpoint Security Assessment & Detection Testing Tool, simulates common endpoint threats in a controlled lab to validate monitoring controls, develop Sigma/YARA detections, and harden endpoints.

C++maintained
CalderaAgentC2 simulation

Caldera-compatible endpoint telemetry & control validation agent, generates predictable C2 artifacts for SIEM rule tuning, SOC training, and EDR validation against MITRE ATT&CK.

C++maintained
Network ConfigNetworking

Python scripts for network configuration and testing, automates common network tasks and validates connectivity in lab and Production environments.

Pythonmaintained

// credentials

Verified

All credentials
CySA+ badgeCySA+CompTIA Cybersecurity AnalystCompTIA · 2023
Security+ badgeSecurity+CompTIA Security+ - training, labs & field workCompTIA ·
CISSPCertified Information Systems Security Professional(ISC)² · In progress - Q2 2027

// contact

Let's secure something together.

I'm open to new challenges and security conversations.

Start a conversationresume.pdf