Security is not just a feature.
It's a mindset.
I'm Victor Nthuli — I secure cloud infrastructure, implement SIEM solutions, and harden enterprise systems against evolving threats, so the engineering teams I work with can move fast without trading away security.
Core Expertise
Specialized in securing modern infrastructures and responding to emerging threats
Security Monitoring & Incident Response
Advanced proficiency in monitoring security alerts, analyzing complex incidents, and orchestrating timely responses across cloud and on-premises environments.
Identity & Access Management
Expert in implementing robust access controls, user provisioning, and rights deprovisioning, ensuring compliance with security policies and regulatory standards.
Vulnerability Assessment
Skilled in conducting detailed vulnerability assessments to identify and mitigate potential threats, enhancing organizational security posture.
Featured Projects
The latest from my security engineering portfolio
RustVault: Self-Hosted Password Vault and Privacy Toolkit
2026
A password vault and privacy toolkit written in Rust that runs only on your own machine: encrypted vault, recovery...
Windows Security Setup: Wazuh, Sysmon and Sysinternals in One Command
2025
A PowerShell script that enrolls a Windows host into Wazuh and installs Sysmon and the Sysinternals Suite in one...
Latest Security Insights
Thoughts and analyses on cybersecurity trends and best practices
Claude Code's 'Don't Ask Again' Files: Find and Fix Leaked Keys
One click on "Yes, and don't ask again" in Claude Code can save a password into a project file. That file has turned up in 1,122 public GitHub copies. This post corrects five common beliefs about it and explains how to find, revoke and hide these files.
*sshole: Patch and Hunt OpenSSH Long-Password Logins on Alpine
On musl-based systems such as Alpine, a password over 256 bytes could log in to "*" key-only accounts through OpenSSH. Here's how to find exposed hosts, patch to 10.6p2, and search auth logs for logins that should be impossible.
Ready to secure your digital assets?
Whether you need help with incident response, SIEM implementation, or security assessments, I’m here to help you protect what matters most.
Get in Touch