Freelancers using Security Onion in LagosFreelancers using Security Onion in Lagos
ProjectsPeople
ibukun Babalola's avatar
ibukun Babalola
Lagos, Nigeria
SOC Analyst |M365 · SIEM · Security Engineer · AI Automation
New to Contra
SOC Analyst |M365 · SIEM · Security Engineer · AI Automation
Cover image for Built a complete enterprise-grade SOC
Built a complete enterprise-grade SOC environment from scratch: featuring Wazuh SIEM with custom detection rules, Security Onion with Suricata IDS/IPS and Zeek network monitoring, Active Directory with advanced security logging via Group Policy, and Windows Server with Sysmon telemetry. Designed and executed MITRE ATT&CK-aligned attack simulations from Kali Linux and validated detection coverage through red team exercises. Achieved over 95% detection rate across all tested techniques and tactics. This project served as the foundation for understanding how detection engineering decisions translate into real gaps and how to close them.
0
17
Cover image for Performed a read-only Microsoft 365
Performed a read-only Microsoft 365 security assessment for an 11-user UK logistics company, uncovering two Critical findings: MFA disabled on Global Administrator accounts and an active email forwarding rule on the Finance Manager's mailbox consistent with Business Email Compromise. Delivered a clear priority action plan, all remediable within 72 hours using tools already included in the client's existing M365 licence along with SharePoint sharing controls and Conditional Access policy configuration to close legacy authentication gaps.
0
8
Cover image for Conducted a full cybersecurity risk
Conducted a full cybersecurity risk assessment for NexaSoft's AWS EKS-hosted Employee Self-Service HR Portal, processing sensitive employee PII including payroll, health records, and government-issued ID. Identified three Critical and five High risks across Azure AD SSO, cloud IAM configuration, and insider privilege controls, aligned to ISO 27001. Delivered a prioritised 90-day remediation roadmap using native AWS and Azure tooling, reducing all Critical risks before go-live and supporting the client's ongoing ISO 27001 certification obligations under Australia's Privacy Act 1988.
0
11
Cover image for Delivered a GRC-aligned cybersecurity risk
Delivered a GRC-aligned cybersecurity risk assessment for an Azure-hosted AI-Driven HR Analytics Service processing employee PII and behavioural data. This engagement went beyond conventional security reviews to address AI-specific risks including data poisoning and model bias that carry direct legal exposure under the Canadian Human Rights Act and the proposed AI and Data Act (AIDA). Identified five High risks and produced a mitigation strategy using Azure-native controls, alongside governance recommendations to ensure compliant and auditable AI decision-making ahead of AIDA enforcement.
0
12
Security Onion(1)