Open to work

$> hello, world — I'm

Ali Chisom

SIEM Operations

I turn thousands of daily alerts into measured, hardened defense.

View the work Get in touch

● Nigeria · Remote-friendly

chisom@sec-dev: ~/research

$$ whoami

ali.chisom — cybersecurity analyst

$$ cat focus.txt

siem — threat hunting — malware analysis — incident response

$$ ./verify --certs

CySA+ — Security+ — GREM (in progress)

$$ sudo ./status --availability

OPEN — exploring SOC / blue-team roles

// mission

A discipline, not a feature

“I turn thousands of daily alerts into measured, hardened defense.”

I'm a cybersecurity analyst who lives in the alert queue, investigating 800+ security alerts every month, leading incident response, and hunting threats across enterprise environments.

My work ships measurable outcomes: mean time to containment down 30%, attack surface reduced 40%, and critical vulnerabilities down 35%, through SIEM operations, malware analysis, and translating findings into fixes teams actually ship.

// work

Selected projects

A breadth of offensive, defensive, and cloud security work, each with a full engineering case study.

View all work

Network Automation

Network Config Script

Open source

A collection of Python/Netmiko automation scripts that configure routers, firewalls, and MPLS/security tunnels at scale, from single-router configs to full BGP, OSPF, EIGRP, DMVPN, and IPSec deployments.

Backup multiple router configs to per-device files automatically.

Python
Netmiko
Cisco IOS
+6

System Administration

Advanced System Admin Toolkit

Open source

A comprehensive multi-platform administration suite with Windows (76 options) and Linux (72 options) editions, network diagnostics, system repair, security audits, performance tuning, and reporting in a menu-driven interface.

76+ Windows / 72 Linux diagnostic, repair, security-audit, and optimization features.

Batch
PowerShell
Bash
+3

Malware Analysis

Malware Analysis Lab

Research

A curated, structured collection of live and reverse-engineered malware samples, detailed analysis reports, and Indicators of Compromise (IoCs) for students, analysts, and reverse engineers.

Real-world artifacts to study threat-actor behaviors and multi-stage attack chains.

Reverse Engineering
YARA
FLARE VM
+3

// research

Current research

All research

Malware AnalysisHigh

Malware Report: A curated corpus of in-depth malware analyses

A curated collection of in-depth malware family analyses, ransomware, RATs, and PowerShell infostealers, covering static/dynamic analysis, unpacking, persistence, C2 patterns, extracted IoCs, and blue-team detections.

2025 · 30 min read

// experience

Career at a glance

Full timeline

// open source

Public code

Maintainable, public engineering the Technical Lead can audit directly.

GitHub profile

Captaindefensive research

Endpoint Security Assessment & Detection Testing Tool, simulates common endpoint threats in a controlled lab to validate monitoring controls, develop Sigma/YARA detections, and harden endpoints.

C++maintained

CalderaAgentC2 simulation

Caldera-compatible endpoint telemetry & control validation agent, generates predictable C2 artifacts for SIEM rule tuning, SOC training, and EDR validation against MITRE ATT&CK.

C++maintained

// credentials

Verified

All credentials

CySA+CompTIA Cybersecurity AnalystCompTIA · 2023

Security+CompTIA Security+ - training, labs & field workCompTIA ·

GREMGIAC Reverse Engineering MalwareGIAC/SANS · In progress - Q4 2026

// contact

Let's secure something together.

I'm open to new challenges and security conversations.

Start a conversation resume.pdf