Cybersecurity & AI/ML Engineer | Portfolio-Driven Developer | Open University of Kenya (BSc Cybersecurity & Digital Forensics)

Building security tools, threat detection systems, and automation platforms. Based in Nairobi, Kenya. Open to freelance security work, AI evaluation projects, and full-time opportunities.

• Network Security — IDS, DNS reconnaissance, port scanning, network enumeration
• Application Security — Web vulnerability scanning, phishing detection, incident response
• Penetration Testing — Web apps, command injection, SQL injection, XSS testing
• Machine Learning — Anomaly detection, email classification, threat modeling
• Cryptography — AES-256, RSA hybrid encryption, secure key management
• Enterprise Security — Compliance auditing (GDPR, HIPAA, PCI-DSS, ISO27001)

• Backend: FastAPI, Flask, Node.js, Python
• Frontend: React, dark-themed UI/UX design
• Databases: SQLite, PostgreSQL
• Automation: Multi-agent systems, content pipelines, API integrations

• Classification: Phishing detection, intrusion detection with scikit-learn
• Feature Engineering: Email analysis, network traffic patterns, NLP signals
• Model Evaluation: Cross-validation, ROC-AUC, precision/recall optimization

[#12] ML-Based Intrusion Detection System

• Random Forest + Gradient Boosting classifiers for network anomaly detection
• 95%+ accuracy, ROC-AUC 0.97+
• Real-time alert system with severity scoring
• GitHub

[#13] Web Application Security Scanner

• OWASP Top 10 vulnerability detection
• SQL injection, XSS, CSRF, security header analysis
• CVSS scoring + remediation recommendations
• GitHub

[#14] DNS & Certificate Intelligence Tool

• DNS enumeration, subdomain discovery, SSL/TLS certificate analysis
• Certificate chain validation, DNSSEC verification
• Threat intelligence mapping
• GitHub

[#15] Security Audit & Threat Intelligence Dashboard

• Multi-framework compliance (GDPR, HIPAA, PCI-DSS, ISO27001)
• Compliance gap analysis, risk scoring, executive reporting
• Remediation prioritization engine
• GitHub

[#07] SOC Incident Response Simulator — React + Node.js with 30+ MITRE ATT&CK scenarios
[#08] Phishing Detection Model — scikit-learn classifier, 94% precision
[#09] Network Enumeration Lab — Kali Linux reconnaissance against Metasploitable2
[#10] Professional Port Scanner — Flask + React with CVE correlation
[#11] Hybrid File Encryption Tool — AES-256-GCM + RSA cryptography

[#01-06] Web Security Labs — Command injection, SQL injection, XSS, black-box testing, WordPress exploitation, DVWA assessment

Languages: Python · JavaScript · Bash · SQL

Backend: FastAPI · Flask · Node.js · Express

Frontend: React · Vanilla JS · CSS Grid/Flexbox · Dark Theme Design

Security: Cryptography · OWASP · MITRE ATT&CK · Penetration Testing

ML/Data: scikit-learn · pandas · feature engineering · Random Forest · Gradient Boosting

Tools: Git · Docker · Kali Linux · Nmap · Burp Suite · Metasploit · dnspython

Databases: SQLite · PostgreSQL

Open University of Kenya

• BSc Cybersecurity & Digital Forensics (Expected 2028)
• Coursework: STRIDE threat modeling, OAuth 2.0 security, Snort IDS/IPS, SQL injection, XSS
• Hands-on labs: DVWA, Metasploitable2, penetration testing environments

Freelance Security & ML Engineer (2024 - Present)

• Built 15 production-grade cybersecurity projects
• ML model training and evaluation (scikit-learn, feature importance)
• Full-stack security applications (Flask + React)
• Enterprise compliance auditing (GDPR, HIPAA, PCI-DSS, ISO27001)

Freelance AI/ML Evaluation (Outlier AI)

• Evaluated LLM outputs and AI system quality assurance
• Prompt engineering and edge case analysis

✅ 15-Project Portfolio — Complete security toolkit spanning network, app, ML, and enterprise security
✅ Enterprise Compliance — Audit engines for GDPR, HIPAA, PCI-DSS, ISO27001
✅ ML Expertise — Intrusion detection with 95%+ accuracy, phishing classification
✅ Production Quality — All projects have documentation, tests, and GitHub deployment
✅ Full-Stack Capability — Backend APIs, frontend UI, databases, real-time dashboards
✅ Cryptography — AES-256, RSA, HMAC, secure key management

• 🔗 Portfolio: https://korir555.github.io/cybersecurity-portfolio
• 💼 LinkedIn: https://linkedin.com/in/emmanuel-korir-a98b32229/
• 📧 Email: ekorir555@gmail.com
• 🐙 GitHub: @Korir555

Open to: Freelance security projects · Full-time cybersecurity roles · Contract work · Collaboration

15 production-grade security projects. 1000+ lines each. Ready to ship. 🚀