Somto Nwali

Motivated Cybersecurity Analyst with a strong foundation in network security, identity and access management, and system administration. Hands-on experience gained through practical labs and projects, with strong problem-solving skills and a passion for learning, investigating security issues, and helping organizations maintain secure and reliable systems.

• Designed and configured Windows Server/Entra ID IAM lab, implementing user provisioning, organisational units, security groups, access permissions, and Group Policy Objects (GPOs) to enhance security and streamline user management.
• Engineered a virtualized Splunk SIEM lab to centralize Windows, Linux, and Snort IDS telemetry, creating detection alerts, security dashboards, and reports for monitoring and investigating suspicious activity.
• Analyzed live and captured PCAP network traffic using Wireshark, investigating DNS, TCP, HTTP/HTTPS, SMB, and FTP protocols to identify anomalies, suspicious communications, and potential security threats
• Designed and configured an isolated Windows malware analysis lab, conducting behavioral analysis with Procmon, Wireshark, Regshot, Process Explorer, and other tools to identify process execution, network activity, registry changes, and system-level behavior.