Ken Underhill, CCSK

Underground Ops

Investor

EC-Council

Ethical Hacking Advisory Board
https://www.eccouncil.org/ceh-advisory-board/

Ethical Hacking Advisory Board Member (Volunteer)

EnterpriseKC

I sit on the advisory board for the Cyber Range, which is built to support cybersecurity talent development in the Kansas City area.

Heartland Cyber Range (HCR) Advisory Board (Volunteer Position)

Breaking Barriers Women in Cybersecurity (BBWIC)

An amazing group of women creating a safe place for other women to start and grow their cybersecurity career.

Advisory Board Member (Volunteer)

Whole Cyber Human Initiative

Board Advisor (Volunteer)

Not Disclosed...

I've been around the block and learned from many failures and a few wins.

Entrepreneur

Cyber Life

Successful exit.

Cyber Life is a cybersecurity training company focused on helping SMBs.

About the television show:
I wanted a platform where cybersecurity professionals could share their voice without biased algorithms, which is why the Cyber Life television show was created.  

After a successful 4 season run of the Cyber Life television show (with about 2.1 million monthly viewers), we have decided to focus the Cyber Life team on other projects but the show episodes will now live on the YouTube channel linked below. 

Watch the Cyber Life television show at the links below:
www.CyberLife.TV
YouTube: https://www.youtube.com/c/CyberLifeTV

Co-Founder (Exited)

RapidAscent

I led the initial build of the RA program for an immersive hands-on program, with custom labs that would lead to an OTJ apprenticeship for career changers.  Students with no prior technical experience were hacking and defending network infrastructure efficiently within the first week of the program that was built.  I then brought in another experienced cybersecurity professional to lead the program moving forward, so I could retire again.  

From what I heard, the program was adjusted to more of an entry level Sec+ based program after I left, based on client demand, and the program received funding through the Biden administration grant for cybersecurity to now offer free tuition for the program to applicants.

I'm looking forward to RA continuing to expand the program to help more deserving career changers and veterans get their start in cybersecurity careers.  I'm hopeful that expansion of the program and funding will allow RA the opportunity to increase diversity of its executive team.

Vice President

Cybrary

I built cybersecurity courses for digital forensics, pen testing, and more.  Over 270K students still taking my courses last I knew.

Master Instructor

I help businesses have better control over infrastructure security and development costs with the Nexus | DevSecOps | Cyber Security

I help people learn cybersecurity knowledge and skills.

Free Cybersecurity Training and career videos over on YouTube: 
https://www.youtube.com/c/CyberLifeTV

I've been featured in Forbes, Reader's Digest, Medium, Tech Republic, Fox, NBC, Dark Reading, Voyage Houston Magazine, MSN Money, and many more places over the years.

Multi-award winning and international best selling author of Hack the Cybersecurity Interview.

Free Cybersecurity Training and career videos over on YouTube: 
https://www.youtube.com/c/CyberLifeTV

Listen to the Cyber Life Podcast to hear from industry experts.

Apple
https://podcasts.apple.com/us/podcast/cyber-life/id1469224570

Amazon  
https://music.amazon.com/podcasts/aeea479e-561e-4d12-911b-5e1b717e8887/cyber-life

iHeart Radio
https://www.iheart.com/podcast/269-cyber-life-122068176/

Advisory Board Member

Sabi

Senior Information Security Engineer / Acting CISO

CyberSafe Foundation

As an advisory board member i provide strategic guidance to cyber safe foundation team, helping them to develop and implement effective strategies that align with the organisation's mission and goals.

As an advisory board members i bring industry-specific expertise to the organisation, helping the leadership team to understand industry trends, best practices, and emerging opportunities.

I am responsible in helping cyber safe to identify and manage risks, ensuring that the organisation operates in compliance with legal and ethical standards.

My role is to also assist with fundraising efforts by providing introductions to potential investors, helping to craft funding proposals, and offering strategic guidance on fundraising strategies.

Mentorship: The role as allows me to the fellowship cohorts team, offering guidance and support as they navigate the challenges of joining the cyber security industry.

Beba-Beggie: Smart storage E-lockers 

Africa's Talking

As the VP of data and information security i was tasked with all things Security. This responsibilities included:

Developing and implementing information security policies and procedures to safeguard the organization's information assets. This includes developing procedures for identifying and addressing security threats, establishing user access controls, and creating protocols for handling sensitive information.

Conducting security risk assessments to identify potential threats and vulnerabilities to the organisation's information systems. Based on the assessments, i would recommend appropriate security measures to mitigate the identified risks.

Managing access control  to the organisation's information systems. This includes granting and revoking user privileges, implementing multi-factor authentication, and monitoring user activity to detect and prevent unauthorised access.

Implementing and managing security technologies and tasked to deploy appropriate security technologies to protect the organisation's information systems. This includes firewalls, intrusion detection systems, and encryption technologies.

Monitoring and responding to security incident and coordinate with relevant departments to address them. They must also maintain incident response plans and conduct regular drills to ensure readiness.

Conducting security awareness training information security policies and procedures. This includes conducting security awareness training to ensure that employees are aware of security threats and know how to respond to them.

Maintaining compliance with regulatory requirements like ISO27001 and the Local data protection acts

VP data and information security

As a cyber Security EIR my responsibilities involved the following:

Providing strategic guidance to the company's leadership team on matters related to cyber innovation, entrepreneurship, and business development. This included evaluating new business opportunities, identifying potential markets, and developing strategies for growth.

Supporting internal startups that are affiliated with the company to provide cyber guidance, mentorship, and support. This could involve helping startups develop their business plans, providing feedback on their pitches, and making introductions to potential investors or customers.

Identifying new security opportunities for innovation and growth within the company. This could involve conducting market research, analysing industry trends, and exploring new technologies.

Building networks and relationships with other entrepreneurs, investors, and industry leaders to help the company stay informed about the latest developments in the field.

Building and overseeing the development of Kazzo OTP a cyber security company that provides OTP as a service on all platforms

Entrepreneur in Residence - Cyber Security

VigiTrust

Founded in 2011, the board brings together 150 + CEOs, CXOs, board members, regulators, enforcement bodies, researchers and other key stakeholders in the security & compliance industry - with information sharing as the prime objective. Members and guests exchange ideas about the direction in which the industry is moving in terms of innovation, upcoming laws and standards, case studies and research work!

Global advisory board - Member

Sendy

As a Lead Cybersecurity Engineer at Sendy limited i had several responsibilities to ensure the security of the organisation's information systems.  Some of these responsibilities are:

Leading the security team: As a Lead Cybersecurity Engineer, i was  responsible for leading a team of cybersecurity professional's work, delegate tasks, and ensure that the team is working effectively.

I was responsible for implementing security controls in the development lifecycle,  enterprise security and processes to protect the organisation's information systems. This includes performing risk assessments, developing security policies, and ensuring compliance with relevant regulations and standards.

Conducting vulnerability assessment and penetration testing to identifying vulnerabilities in the organisation's information systems and recommending solutions to address them. This includes conducting regular vulnerability assessments and penetration testing.


Monitoring security for the organisation's information systems for security incidents and responding to them as needed. This includes setting up security monitoring tools, analysing logs and other data, and coordinating with other teams to respond to incidents.

Involved in the process of creating , implementing and rolling out the companies information security policy across all our markets. This also involved running gap analysis and training to align with the policy.

 I was responsible for providing guidance training and implementation to other teams within the organisation on cybersecurity best practices. This includes educating them on how to identify and respond to security incidents and ensuring that they are following security policies and procedures.

Collaborating with other teams within the organization, such as the development team, to ensure that security is integrated into all aspects of the development process

Lead Cyber security engineer

Co-creation Hub (CcHUB)

As a trainer at the CCHUB center i was tasked to train and develop skills for students who had enrolled in Penetration testing cohort. Below was how i went about the one time curriculum training:

1. Development of the course materials: I was able to develop course materials that cover the fundamentals of pen-testing, as well as advanced techniques and methodologies. The course materials followed a clear, concise, and comprehensive, strategy and  included practical exercises and real-world examples.

Deliver training sessions: I later had to deliver training sessions in a classroom, online, or a combination of both. The training sessions were  engaging, interactive, and informative, and  allowed students to apply the knowledge they have learned in a safe environment.

Assess student performance: To measure impact i was tasked in assessing the performance of students during the training program, using tests, quizzes, and practical exercises. This helped to identify areas where students are struggling and provide them with additional support and guidance

Cyber Training Specialist

WoSEC

WoSEC is about women supporting women (or those who identify as women). We believe that confident and strong women build each other up. We believe in shining a light on one another's accomplishments.

Whether you're a student who wants to pursue a career in the sciences, a single mother moving into cyber security or an experienced professional wanting to network with your peers, there is a place for you

Founder: Women of security kenya

WPP-Scangroup

As a Senior Quality assurance engineer my role was expanded from everyday engineering work to managing he entire Quality assurance team in our Sub -Saharan offices: Some of my key responsibilities included:

Developing a DevOps pipeline for our entire development team that worked with our clients requirements. This involved a pipeline for development , staging , testing and production.

Create a new pipeline for docker , kubernetes and AWS environment that would increase productivity and allow business continuity in a very busy environment.

Develop and execute test plans: I was responsible for developing and executing comprehensive test plans that cover all aspects of the software product or system.

Create and maintain test cases that cover functional and non-functional requirements of the software application.

Manage and prioritise defects: I was responsible  identify and manage defects by prioritising them, tracking them to resolution, and verifying that they have been fixed.

Collaborate with development teams to ensure that testing is integrated into the software development life cycle, and that quality is considered at every stage of development.

Automate testing processes through test scripts to increase efficiency and coverage of testing.

Ensure compliance with quality standards and  that the software product meets quality standards and complies with relevant regulations and standards.

Collect customer requirements on products requirements , User experience and run training to ensure that are the requirements were met.

Participate in release management activities by coordinating and executing the testing of the product before it is released to production.

Senior Quality Assurance Engineer - Sub Saharan Africa

Identifying and mitigating security risks: I was responsible for identifying security risks in the customer's products, applications, and infrastructure. They work with the development team to identify vulnerabilities and implement strategies to mitigate them.

Creating and implementing security policies and procedures: My work was to create and implement policies and procedures that protect the customers products and infrastructure. This can include everything from access control to data encryption to incident response.

Conducting vulnerability assessment and penetration testing: I was responsible for conducting regular security assessments to identify potential vulnerabilities and weaknesses in the company's products and infrastructure. 

Collaborating with other teams within the company, such as development, operations, and risk management, to ensure that security is integrated into every aspect of the company's operations.

Staying up-to-date with security trends, technologies, and best practices to ensure that the company's security measures remain effective.

Responding to security incidents and breaches, including investigating the cause of the incident, mitigating the damage, and implementing strategies to prevent similar incidents from occurring in the future.

Some technologies i was exposed to : Frida , Android , Reverse engineering , Incidence response . Burp suite , Scanning recon, Exploitation etc

Application Security Engineer

Ramsa Limited

As a full stack developer at Ramsa limited , i was responsible for developing customer web based platforms for digital transformation

My job description involved the following responsibilities:

Developing and maintaining web applications using PHP and other related technologies, such as HTML, CSS, JavaScript, and MySQL.

Collaborating with other developers, designers, and project managers to ensure that projects are completed on time, within budget, and to the required specifications.

Building user interfaces that are responsive, easy to use, and visually appealing.

Creating and maintaining databases to store application data.

Integrating third-party services and APIs into web applications.

Debugging and troubleshooting issues that arise during development, testing, and deployment.

Ensuring that code is written in accordance with industry standards and best practices.

Writing and maintaining technical documentation to support the development process.

Participating in code reviews and providing feedback to other developers.

Staying up-to-date with the latest trends and technologies in web development to ensure that projects are developed using the best tools and practices available

Full-stack Developer - PHP , HTML, CSS , laravel 

Security can be a very expensive commodity to not have.

taplio

The Battle

Ken Underhill, CCSK

Judy Ngure

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?