Mentors who’ve done the work.

Rachael Kivuti is an ERP Consultant at Soft Consult and a cybersecurity professional specializing in bridging the gap between core enterprise infrastructure, emerging tech and offensive operations. Rachael's work has spanned application security, digital forensics and securing ERP environments like SAP, touching almost every moving part of an organization, from finance to supply chain to data workflows to operational logic. Rachael's path is proof that you never have to abandon your existing technical interests to break into cybersecurity; instead, you build on top of them. Having navigated intensive training programs, earned certifications across multiple domains (Security+, eJPT, CCNP, ISC2 CC, ASCP, SAP) and stepped into leadership roles for cyber community initiatives, Rachael understands how to turn raw technical curiosity into structured, real-world skills. Rachael's mentoring focus is helping learners align their unique IT, development or business background with their cybersecurity journey.

I am a cybersecurity community leader and volunteer cybersecurity consultant at Murang'a University of Technology. I host weekly hands-on training sessions that simulate real-world attack scenarios, giving participants a practical understanding of how modern threats operate. I also onboard incoming university students with foundational cybersecurity best practices, ensuring a secure and seamless campus experience from day one. With 2+ years of experience in offensive security, my strength lies in translating complex attack methodologies into actionable knowledge bridging the gap between theory and real-world application. I take pride in transforming young passionate cybersecurity enthusiasts into proficient professionals through consistent mentorship and principled leadership.

I would describe myself as curious and resilient. I have experience across cybersecurity operations, digital forensics, and security-focused analysis roles in both public and private sector environments, with exposure to investigative and security monitoring work. I worked at the Anti-Counterfeit Authority of Kenya as a Cybersecurity Intern and Investigator, where I supported investigations into counterfeit goods and contributed to casework involving evidence collection, analysis, and reporting.I also completed a Fleet Monitoring internship, where I was introduced to SOC-style monitoring and gained hands-on exposure to security event tracking, alert handling, and operational monitoring processes. Most recently, I worked as a Security Operations Analyst, where I supported security monitoring workflows and helped improve how security alerts were reviewed and escalated within the organization.I have also been part of a cloud mentorship program under GDE, where I engaged with industry professionals and contributed to a cloud security white paper (ACXT-207), which operationalizes the NIST Zero Trust framework and explores practical cloud security architecture and risk considerations. I am particularly focused on growing in cloud security and security operations, while strengthening my understanding of both offensive and defensive security practices. I am still early in my journey, but actively building hands-on experience and looking to contribute meaningfully to the tech space

Samuel Hiira is a cyber defender with over 3 years of experience across SOC operations, IT support, and training, delivering value to great organisations: Amref Health Africa, Yelbridges, Amica Savings & Credit, and currently HF Bank, each one shaping how Samuel thinks about security and people. In IT support, Samuel found joy not just in solving problems, but in finding smarter ways to solve them, and discovered a genuine love for helping beginners find their footing in the field. What drives Samuel's SOC career is curiosity, about what is happening inside the network and out there in the threat landscape. At HF Bank, Samuel monitors systems, investigates alerts, and researches events to stay one step ahead of attackers. Beyond defending, Samuel is on a mission called "Be Aware": helping everyone understand their security environment, from top management understanding their exposure to employees knowing how to stay safe online. Believing you can only teach what you truly understand, Samuel masters a domain before stepping in front of anyone to share it.

I am a cybersecurity professional with experience in IT audit, cyber defense, and security testing. My work has included assessing security controls, supporting audit and compliance initiatives, conducting security assessments, and helping organizations strengthen their security posture. I am best at helping learners understand GRC, security operations, certification preparation, and how to transition from training into real-world cybersecurity roles. I have also mentored aspiring professionals, helping them build practical skills, confidence, and career direction.

I am a cybersecurity professional specializing in Security Operations, Threat Intelligence, and Detection Engineering, with experience supporting enterprise environments in the banking and consulting sectors. I have contributed to the development of SIEM detection use cases, cloud security monitoring content, threat intelligence initiatives, incident investigations, and threat hunting activities using platforms such as LogRhythm and Microsoft security technologies. My work has focused on improving threat detection capabilities, strengthening security monitoring programs, and supporting cyber threat intelligence implementations across multiple environments. I also maintain hands-on labs focused on Active Directory, SOC operations, and penetration testing to continuously develop practical skills and stay current with evolving threats. I am best at helping mentees build careers in cybersecurity, understand SOC operations, develop threat analysis and incident investigation skills, create effective detection use cases, and gain practical experience through hands-on learning. My goal is to help aspiring professionals bridge the gap between theory and real-world security operations.

My name is John Musyoki, currently working with deloitte East Africa as part of offensive security where we are helping clients in simulating threat actor activities in their ICT infrastructure.

Senior Security Operations Center Analyst with expertise in banking, specializing in Threat Hunting, Incident Analysis and Response, Risk Assessment, Penetration Testing, Artificial Intelligence Security, Data Protection, Digital Forensics, Business Continuity Management, and Cybersecurity Training. Currently pursuing a Master of Science in Information Security and Digital Forensics at the University of East London. I am dedicated to advancing cybersecurity initiatives and contributing to the development of a safer and more secure technological environment.

I am a Cybersecurity Engineer with experience across banking, NGO, government, and consulting environments, specializing in Governance, Risk & Compliance (GRC), SOC operations, and systems security. I have worked on IT risk assessments, compliance audits, security monitoring, incident response, and Microsoft 365 security management. At Salaam Technology, I supported ISO 27001, NIST, and CIS Controls compliance initiatives, helped improve incident response times by 40%, reduced phishing incidents by 45% through awareness training, and contributed to strengthening endpoint and firewall security. I have also conducted penetration testing, digital forensics investigations, and cybersecurity assessments for organizations and private clients. I am best at helping people understand cybersecurity in practical terms, bridging technical security concepts with real business and operational needs. I have mentored over 100 cybersecurity learners through workshops and community programs and enjoy helping others build confidence through hands-on learning.

I am an experienced information security leader with over eight years in financial services, retail, and cloud environments. My career spans roles as Head of Infrastructure & Information Security at Kenswitch, Network Security Engineer at Network International, and IT Manager at Optica. I have led PCI DSS and ISO 27001 compliance programs, managed enterprise risk registers, and overseen incident response across complex environments. My technical expertise includes SIEM monitoring, vulnerability management, and cloud security (Oracle Cloud Infrastructure IAM, Azure). I am also a Wazuh Ambassador, actively contributing to the cybersecurity community through mentorship and knowledge sharing. Currently preparing for the CISSP exam, I combine hands‑on technical depth with a strong governance mindset. My passion lies in mentoring professionals to build resilience, align security with business goals, and grow into leadership roles.

I have over 10 years of experience in Information Technology and Cybersecurity, with much of my career focused on supporting and securing government information systems. I have worked across Security Operations Centers (SOC), incident response, cybersecurity planning, cyber defense operations and work force development, where I have been involved in protecting critical systems, investigating security incidents, and strengthening overall cyber resilience. My role has given me a chance to take part in cyber exercises and defense planning activities, gaining practical experience in threat detection, incident management, and coordinated response efforts. These engagements have helped strengthen my understanding of real-world cyber threats and organizational preparedness. I am particularly interested in mentoring students by helping them connect theory with practical application in areas such as SOC operations, incident response, threat detection, cybersecurity fundamentals, governance and risk, and career development. My focus is on building practical skills, critical thinking, and readiness for real-world cybersecurity roles.

I have a Credly badge from Cyberseurity hands-on skills course at AfricaHackon. I have learnt from the best (Dr.Bright Gameli and team). I am mostly interested in Offensive security particularly Mobile application and Web API penetration testing using Burpsuite and Genymotion mobile emulator. Currently I am learning Reqable . I believe that the only way to become the best is to teach someone else a skill that you have mastered. I have 10 years experience in operations management too. So, I would love to pass on everything I know.

I am a cybersecurity practitioner-in-training focused on defensive security and SOC fundamentals, supporting beginners and career changers entering the field. I hold certifications including CompTIA CySA+, CompTIA Security+, the Google Cybersecurity Professional Certificate, and Certified in Cybersecurity. I continue to develop my skills in SOC operations, threat detection, and defensive security. I am available for beginner-focused mentoring in cybersecurity fundamentals, career transition guidance, and SOC learning support, within selected time windows. Through my cybersecurity awareness platform, CyberUp Daily, I also work to make cybersecurity concepts more accessible to individuals and organizations. I believe cybersecurity growth comes from continuous learning, curiosity, discipline, and practical application.

Velma Anangwe is a cybersecurity professional with experience in offensive security, security training, purple teaming, and automation-driven problem solving. Velma previously worked at Serianu under the Cyber Shujaa program as a Cybersecurity Trainer, conducting Vulnerability Assessments and Penetration Tests (VAPTs), and was selected for the trainer role after emerging as one of the top-performing female security analysts in the program. Velma currently works with CYBER RANGES, focusing on VAPTs, purple teaming, and quality assurance security testing across simulated and enterprise environments. Beyond corporate roles, Velma has independently delivered cybersecurity consultancy services for major organizations under NDA, helping strengthen security posture, identify critical vulnerabilities, and improve resilience against evolving threats. Velma's technical strengths span visual programming, TypeScript, API integrations, workflow automation, and AI-powered tools that accelerate software development and security operations, combining cybersecurity expertise with modern engineering workflows to build efficient, scalable, and practical solutions.

Martin M. Kamethu is the Lead Mentor and Chief Talent Architect at Ongoza Cyber Hub (OCH), where he designs how Africa's next cybersecurity professionals are found, trained and proven: from the Cyber Career Clinic and the OCH Readiness Score to the VIP Framework, which helps learners turn their skills into value, impact and purpose. He is the author of The Invisible Expert, the book behind the clinic's Mason, Builder and Architect levels. Alongside OCH, Martin is a Cybersecurity Consultant at Serianu Limited, specializing in technology, risk, and security operations advisory services, and currently leads Serianu Botswana Operations. He helps organisations design and implement simple, practical, and effective cybersecurity risk management capabilities that strengthen their cyber resilience, through programs tailored to the African context. With over 12 years of experience as a cybersecurity and technology leader, Martin is deeply passionate about innovation and leadership, particularly in exploring Africa's potential to address current and future global cybersecurity challenges. He is a Certified Ethical Hacker and is pursuing his MBA at Hult International Business School.

I started my cybersecurity career after school, having transitioned from a none technical background, I took courses applied to programs like OCH and this learning helped me land a role as a SOC Analyst. I'm curriently a Tier 2 analyst. I also work as a threat intelligent analyst, my role gives me the experiense on setting up SIEM environment for inhouse SOC within organizations. Within the innovation space, I'm actively working on AI projects that involves safe integration of AI System within organizations. I also work as a cybersecurity facilitaor and help expalin technical terms to students.

I moved to Cybersecurity from the Aviation Library and IT support. Became a Cybersecurity engineer and am now a GRC manager. My previous roles are really coming in handy in my current job; this shows that cybersecurity skills can be borrowed from other areas like audit and the technical library. I am open to discussing my role and what I am learning. I am also a commitee member at KamiLimu

I have worked for a global law firm Dentons Hamilton Harrison & Mathews where we were dealing with very sensitive data and information from a tech perspective and this led me to later advance into information security where i have attained Certification Information Systems Management by ISACA and i was recognized among the top three student in the same in Kenya. I like how information security is a matter of governance risk and compliance before it is even technical. On the technical side i have CompTIA Security Plus certification which sheds a good light on the tools used for making information security possible.