Open to Senior Roles & Consulting

Kwadwo
Aboagye

(preferred: “Kojo”)

Hey, I'm Kwadwo — a CMMC Certified Professional (CCP) with an active DoD Secret Clearance (Tier 3) and 12+ years in cybersecurity. I specialize in DFIR, threat detection engineering, FedRAMP compliance, and cloud security across enterprise and federal environments.

Whether it's hunting adversaries through SIEM telemetry, authoring SSPs and POA&Ms, or building detection content that stops breaches — this is my work.

🔐 DoD Secret — Tier 3 CMMC CCP 2025 CISSP Active IT Since 2006 Remote
19+
Years in IT
12+
Years Cybersecurity
40%
Breach Reduction
7+
Credentials
Kwadwo (Kojo) Aboagye
Kwadwo (Kojo) Aboagye
CMMC CCP · DoD Secret T3 · Senior Cybersecurity Engineer
SCROLL
CMMC Level 2FedRAMP AssessmentSOC 2 Type IINIST 800-53 Rev 5DFIRThreat HuntingGoogle SecOpsMITRE ATT&CKDoD Secret ClearanceSSP · POA&M · SARCloud SecurityIncident ResponseFISMADetection EngineeringCrowdStrike FalconZero TrustHypothesis-Driven HuntingDetection-as-CodeCMMC Level 2FedRAMP AssessmentSOC 2 Type IINIST 800-53 Rev 5DFIRThreat HuntingGoogle SecOpsMITRE ATT&CKDoD Secret ClearanceSSP · POA&M · SARCloud SecurityIncident ResponseFISMADetection EngineeringCrowdStrike FalconZero TrustHypothesis-Driven HuntingDetection-as-CodeCMMC Level 2FedRAMP AssessmentSOC 2 Type IINIST 800-53 Rev 5DFIRThreat HuntingGoogle SecOpsMITRE ATT&CKDoD Secret ClearanceSSP · POA&M · SARCloud SecurityIncident ResponseFISMADetection EngineeringCrowdStrike FalconZero TrustHypothesis-Driven HuntingDetection-as-Code
Tools I Use
SplunkSplunk
QRadarQRadar
SentinelSentinel
AWSAWS
AzureAzure
Google CloudGoogle Cloud
CrowdStrikeCrowdStrike
WizWiz
ZscalerZscaler
CyberArkCyberArk
ProofpointProofpoint
AkamaiAkamai
SplunkSplunk
QRadarQRadar
SentinelSentinel
AWSAWS
AzureAzure
Google CloudGoogle Cloud
CrowdStrikeCrowdStrike
WizWiz
ZscalerZscaler
CyberArkCyberArk
ProofpointProofpoint
AkamaiAkamai
ElasticElastic
TenableTenable
QualysQualys
WindowsWindows
GitHubGitHub
TerraformTerraform
BashBash
CiscoCisco
NmapNmap
Palo AltoPalo Alto
DockerDocker
DefenderDefender
ServiceNowServiceNow
VMwareVMware
CriblCribl
MISPMISP
Rapid7Rapid7
AxoniusAxonius
ElasticElastic
TenableTenable
QualysQualys
WindowsWindows
GitHubGitHub
TerraformTerraform
BashBash
CiscoCisco
NmapNmap
Palo AltoPalo Alto
DockerDocker
DefenderDefender
ServiceNowServiceNow
VMwareVMware
CriblCribl
MISPMISP
Rapid7Rapid7
AxoniusAxonius
My Certifications

Click any certification to learn more

00
🔐
DoD Secret Clearance
Department of Defense — Tier 3
Active+ Details
01
🏆
CMMC Certified Professional
Cyber AB & ISACA — 2025
CCP 2025+ Details
02
🛡️
CompTIA Security+ CE
CompTIA — SY0-601
Active+ Details
03
☁️
AWS Developer Associate
Amazon Web Services
Active+ Details
04
📚
CISSP
ISC2
Active+ Details
05
🐧
CompTIA Linux+
CompTIA
Active+ Details
06
🐧
LPIC-1 & LPIC-2
Linux Professional Institute
Active+ Details
07
🎓
Cyberattack Detection & Response
NYU Tandon School of Engineering
2024+ Details
00
🔐
DoD Secret Clearance
Department of Defense — Tier 3
Active+ Details
01
🏆
CMMC Certified Professional
Cyber AB & ISACA — 2025
CCP 2025+ Details
02
🛡️
CompTIA Security+ CE
CompTIA — SY0-601
Active+ Details
03
☁️
AWS Developer Associate
Amazon Web Services
Active+ Details
04
📚
CISSP
ISC2
Active+ Details
05
🐧
CompTIA Linux+
CompTIA
Active+ Details
06
🐧
LPIC-1 & LPIC-2
Linux Professional Institute
Active+ Details
07
🎓
Cyberattack Detection & Response
NYU Tandon School of Engineering
2024+ Details
About

How I got here &
where I’m going.

“Once I understood how attackers move through an enterprise — laterally, silently, persistently — I knew the most valuable place I could be was between them and the data they’re after.”

My journey in IT started back in 2006 as an IT Specialist — building the operational foundation that would eventually shape how I think about security. From network administration, endpoint management, and Linux systems at Wincor-Nixdorf to federal authorization work at the FAA and compliance engineering at Anderson Packaging, every role sharpened a different dimension of my understanding.

If you want to know what threat hunting feels like from the inside, think of Jack Bauer from 24 — except the threat isn’t always at the perimeter. Sometimes they’re already inside, moving quietly through your logs, hiding in normal-looking traffic. At GlaxoSmithKline, I’ve chased exactly those kinds of threats: the slow-moving APT, the insider anomaly, the compromised credential blending into expected behavior. My job is to find them before they find what they’re looking for — and I genuinely love the hunt.

I’ve reduced breach attempts by 40%, built detection content across three SIEM platforms, and authored compliance packages that hold up under real scrutiny. Earning my CMMC CCP in 2025 was a deliberate move toward the assessment world. Long-term, I’m building toward my own consulting firm and the CCA certification. I’m also co-founder and Treasurer of the Afro Golf Club (AGC) — leadership beyond the terminal.

19+
Years in IT (Since 2006)
12+
Years Cybersecurity
40%
Breach Reduction @ GSK
2025
CMMC CCP Achieved
🎯
Current Goal
Land a senior threat hunt or detection engineering role, or CMMC/FedRAMP consulting at a C3PAO or RPO. Building CCA-qualifying hours while supporting DIB organizations.
🔐
Active DoD Secret Clearance — Tier 3
Immediately deployable on sensitive DIB and federal engagements. A rare combination with CCP credentials most consultants don’t have.
🏆
CMMC Certified Professional (CCP)
Issued by Cyber AB & ISACA, 2025. Deep expertise in NIST 800-171, SSP/POA&M lifecycle, gap analysis, and all 110 CMMC Level 2 practices.
⛳️
Treasurer and co-founder of a golf & community organization in Middletown, DE.
🚀
Long-Term Vision
Launch an independent cybersecurity consulting business serving DIB contractors, government agencies, and mid-market enterprises needing CMMC/FedRAMP expertise.
Experience

Where I’ve worked &
what I’ve built.

19+ years across pharmaceutical enterprises, federal agencies, defense facilities, and government contractors — starting as an IT Specialist in 2006.

Security Clearance
Active DoD Secret Clearance — Tier 3
Tier 3 Active Immediately Deployable
Tier 3
Clearance Level
Active
Current Status
Immediate
Availability
Technical Skills
If you are looking for a cybersecurity expert, I don’t just have skills. I have a very particular set of skills.
📋CMMC & Compliance
  • CMMC L1 & L2 (110 Practices)
  • NIST SP 800-171
  • NIST SP 800-53 Rev 5
  • System Security Plan (SSP)
  • POA&M Management
  • Gap Analysis
  • C&A / A&A Packages
  • Security Control Assessment
  • FISMA
  • FedRAMP Process
  • PIAs
  • Contingency Planning
🔍SIEM & Detection Engineering
  • Splunk Advanced
  • QRadar
  • Google SecOps
  • Phantom SOAR
  • TORQ SOAR
  • Detection Rule Development
  • Correlation Logic
  • Alert Triage
  • Log Analysis
  • MTTR Reduction
  • Detection-as-Code
🕵️DFIR & Threat Hunting
  • Digital Forensics
  • EnCase
  • FTK
  • Incident Response Lifecycle
  • Threat Hunting
  • APT Detection
  • IOC Analysis
  • MITRE ATT&CK
  • Adversary Emulation
  • Chain of Custody
  • Hypothesis-Driven Hunting
☁️Cloud Security
  • AWS Security
  • Azure Security
  • Google Cloud Platform
  • Cloud IAM
  • FedRAMP Cloud Authorization
  • Multi-Cloud Posture Mgmt
  • CIS Benchmarks
  • Cloud-Native Detection
🛡️EDR & Endpoint
  • CrowdStrike Falcon
  • Carbon Black
  • ThreatConnect
  • Recorded Future
  • Qualys
  • Tenable
  • PDQ Deploy
  • WSUS
  • IDS/IPS
  • DLP · NAC
⚙️Systems & Infrastructure
  • Linux LPIC-1 & LPIC-2
  • Windows Server
  • JIRA & Confluence
  • SCCM
  • PKI Infrastructure
  • Firewalls & VPN
  • NFS · DHCP · DNS
  • Python · Bash · PowerShell
📊Frameworks & Standards
  • MITRE ATT&CK
  • NIST CSF
  • NIST RMF
  • SOC 2 Type I/II
  • CMMC Level 1 & 2
  • FISMA
  • CVE / CPE / CVSS
  • ISO 27001 Awareness
Professional Development

Conferences &
Development.

🌐
ISC2 Virtual Conferences on AI & Cybersecurity
2021 to Present
ISC2AI & CybersecurityAnnual
🏆
GPSEC Conference
2023, 2024, 2025, 2026
GPSECCybersecurityAnnual
📊
Splunk .conf23 (In Person) & .conf24 (Virtual)
2023 & 2024
SplunkSIEMIn Person & Virtual
☁️
AWS Summit
2022, 2023, 2024 to Present
AWSCloud SecurityAnnual
🏭
ICS Cyber Summit DC Metro — Tysons Corner, VA
July 2024 — In Person
ICSOT SecurityDC Metro
🦅
CrowdStrike Fal.Con 2023 (Vegas) · 2024 (Virtual) · 2025 (Virtual)
2023–2025
CrowdStrikeThreat IntelEDR
Contact

Let’s work
together.

Open to senior cybersecurity roles, CMMC/FedRAMP consulting, C3PAO/RPO positions, and threat hunt or detection engineering engagements. Remote preferred.

Send a message