Benjamin Kipsoi

I provide professional cybersecurity services focused on identifying, validating, and reducing real-world security risks through practical testing and clear reporting.

🔴 Penetration Testing

Web application penetration testing aligned with OWASP Top 10
Manual and controlled automated testing
Proof-of-Concept (PoC) validation where permitted
Risk-rated findings with clear remediation guidance
Optional retesting after fixes

🟠 Red Team Techniques

Attack surface discovery
Credential abuse and access validation (controlled scope)
Privilege escalation testing
Detection and response gap analysis

🔵 SOC & Blue Team Support

Log analysis and alert triage
Incident investigation support
SIEM analysis (Splunk / ELK / Wazuh – practical & lab use)
Detection improvement recommendations

EXPERIENCE

Contributed to security assessment and testing work associated with Frepers Security
Exposure to professional security operations and reporting standards at Serianu
Experience supporting SMEs and institutional environments with ethical, authorized testing

PROOF OF WORK

Redacted penetration test report with PoC evidence available
GitHub projects demonstrating hands-on security tooling, scripting, and analysis
All engagements are performed within an agreed scope, ethically, and with responsible disclosure.