Enoch Egere

Enoch
Egere

Junior cybersecurity and IT professional in West London

I've worked in IT support and security for about three years. Right now I do part-time security consulting, where I go on site to fix vulnerabilities picked up in Qualys scans and roll out endpoint protection for clients.

I'm working towards a cyber security apprenticeship. I'm most interested in offensive security, and I'm building strong defensive foundations first.

  • Based inNortholt, West London
  • CertifiedCompTIA Security+
  • Looking forApprenticeships and junior roles
  • RelocationHappy to relocate
Email me Download my CV LinkedIn See my projects

My route so far

  1. Jul 2023Hak ServicesIT Support
  2. Mar 2025Eleven Sisters HealthcareIT Support and Security
  3. Jun 2026BTEC Level 3 ComputingDistinction
  4. Jul 2026CloudFlexIT Security ConsultantNow

Experience

Jul 2026 to now
Part-time

IT Security Consultant

CloudFlex, London

  • Visit client sites to fix vulnerabilities found in Qualys scans
  • Deployed and set up ESET endpoint security across 10 client workstations
  • Reviewed local admin accounts from the command line and removed unnecessary privileges to enforce least privilege
  • Patch and update client endpoints, and removed unsupported software like old .NET frameworks
  • Go through vulnerability reports and risk trackers to sort fixes by severity
  • Helped prepare clients for Cyber Essentials, working alongside a senior consultant on patching and hardening
Mar 2025 to Mar 2026

IT Support, with security responsibilities

Eleven Sisters Healthcare Agency, London

  • Managed user accounts, signed-in devices and access permissions in Google Workspace
  • Ran the monthly Patch Tuesday cycle and kept devices fully patched, with no critical vulnerabilities left unmitigated
  • Onboarded new staff, covering accounts, device setup and apps on Windows, iOS and Android
  • Found and fixed security weaknesses across the organisation, and wrote up risk assessments for them
  • Kept systems available and data protected in a healthcare setting
  • Ran security awareness training for staff and senior management
  • Advised senior stakeholders on vulnerabilities and how to fix them
Jul 2023 to Feb 2025

IT Support

Hak Services, London

  • Troubleshot hardware, software and network issues from start to finish
  • Set up and monitored remote access sessions with secure configs and access controls
  • Worked with third-party vendors on escalated issues
  • Showed users how to handle their systems properly, which cut down repeat tickets

Education

Sep 2024 to Jun 2026
Distinction

BTEC Level 3 Extended Diploma in Computing

West Thames College

Modules included networking, cybersecurity, systems architecture and database management.

Sep 2023 to Jun 2024
Merit

BTEC Level 3 in Animation and Game Design

West Thames College

Sep 2015 to Jun 2021

NECO Senior School Certificate (SSCE)

Unique International School

English Language C5 (Credit), Mathematics C4 (Credit), Data Processing A1. Converted to the UK equivalent of grade 4 or above.

Certifications

Certifications

  • CompTIA Security+ ActiveCompTIA, November 2025Verify on Credly
  • Certified Cybersecurity Educator Professional (CCEP)Red Team Leaders, December 2025
  • CompTIA AI EssentialsCompTIA, January 2026
  • Computer Hardware BasicsCisco Networking Academy, December 2024Verify on Credly

TCM Security courses

  • Practical Ethical HackingTCM Security
  • Web App PentestingTCM Security
  • Wireless PentestingTCM Security

Working towards

  • MS-102 StudyingMicrosoft 365 Administrator
  • AZ-900 StudyingAzure Fundamentals
  • BTL1 NextBlue Team Level 1, Security Blue Team
  • CPSA StudyingCREST Practitioner Security Analyst

Udemy course certificates

  • Attacking and Defending Active Directory: AD PentestingVivek PanditDec 20258.5 hoursVerify
  • Breaking APIs: An Offensive API Pentesting CourseVivek PanditJun 20255 hoursVerify
  • Complete Network Hacking Course 2025, Beginner to AdvancedRamsai DupatiJan 20255 hoursVerify
  • Recon for Bug Bounty, Penetration Testers and Ethical HackersVivek PanditJan 20259 hoursVerify
  • Ethically Hack Human Mind: Social Engineering FundamentalsCyber TwinkleJan 20251 hourVerify
  • Advanced Cybersecurity and Ethical Hacking: Tools and TechniquesMd. Aliful IslamDec 20242 hoursVerify

CTF badges

Projects and labs

Things I've built, broken and set up to learn.

Defensive

Microsoft 365 and Entra ID lab

I set up my own Microsoft 365 tenant to practise admin and security. I added and verified a custom domain, built Conditional Access policies (MFA for all users, MFA for admin roles and a blocked countries location), set up just-in-time admin access with Privileged Identity Management, traced mail flow in Exchange, and enrolled a Windows 11 VM (TPM, UEFI and Secure Boot set up in VMware) into Intune to test compliance policies.

Entra ID, Conditional Access, PIM, Intune, Exchange Online, Microsoft 365
MFA for all users, with sign-in risk and location conditions
A separate policy requiring MFA for admin roles
PIM eligible assignments, so admin rights are only active when needed
Custom domain added and verified (names blurred)
Offensive and defensive

Home lab

I built a lab in VMware with Kali, a Windows 7 target and a Windows Active Directory domain, so I can practise attacks and then work out how I'd spot and stop them. So far I've got a Meterpreter session on the Windows 7 box, captured an NTLMv2 hash with Responder by poisoning LLMNR and NBT-NS, and used the dumped hashes to pass-the-hash onto the domain controller and land a SYSTEM shell.

The defensive side is the point I care about. Each of these has a clear way to catch or block it, like turning off LLMNR, watching for psexec service installs, and limiting local admin reuse.

VMware, Kali Linux, Active Directory, Responder, Impacket, Metasploit
Capturing an NTLMv2 hash with Responder
Pass-the-hash to a SYSTEM shell on the domain controller
Meterpreter session on a Windows 7 target
Speaking and teaching

Live offensive security session

NxtCyberForge invited me to lead a public live technical session, from recon to exploitation. I presented to around 17 attendees, annotating live, covering HackTheBox walkthroughs, Wi-Fi attacks and phishing simulations with SET. I also run private intro sessions for my own community, covering recon, DVWA, SET and BeEF, and an EternalBlue demo in my lab.

HackTheBox, Kali Linux, Wi-Fi attacks, SET, BeEF
The session announcement A recap from an attendee
Session poster by NxtCyberForge
AI security In progress

Machine learning for security

Three projects from the HackTheBox AI Red Teaming path: a spam classifier, a malware detector and a network anomaly detector.

Python, machine learning, HTB Academy
Networking

Segmented network design

A small branch office network I designed in Cisco Packet Tracer for my BTEC. I split it into four VLANs (managers, assistants, server and WiFi) using router-on-a-stick subinterfaces, then wrote an extended ACL so managers and assistants can reach the server, assistants can't reach the managers' network, and WiFi users can't reach the server network. The server has its own inbound firewall rules, the router has a warning banner, and I set passwords on the router and switch.

Cisco Packet Tracer, VLANs, router-on-a-stick, extended ACLs, firewall rules
The network layout
Extended ACL applied to the assistants and WiFi subinterfaces
Server firewall rules limiting ping, FTP and DHCP to the office subnets
Build

Glass music app

A music web app with a glassy look, a login screen, a spinning vinyl animation and an iTunes music feed. It also has a built-in AI chat. The chat key never touches the browser: the front end calls a Netlify serverless function, and the function holds the API key as an environment variable and talks to the AI provider server-side.

Web app, iTunes API, Netlify Functions, DeepSeek API
Login screen
Trending songs feed
AI chat, keyed through a Netlify function
Build

3 WAY

A browser-based endless runner I made for my BTEC games development unit. You switch between three lanes to dodge spikes, grab power-ups like shields, and try to beat your best distance. It has a health bar, a pause menu, keyboard controls and a music toggle.

Game development, browser
Start screen and controls
Three lanes, spikes and a shield power-up
Pause menu

Outside of projects I do CTFs on TryHackMe and HackTheBox, and I'm working through The Hacker Playbook series in my home lab.

Skills

Security tools

  • Qualys and Nessus
  • Nmap and Wireshark
  • Metasploit
  • Burp Suite and OWASP ZAP
  • BloodHound and Hashcat
  • ESET endpoint security
  • Kali Linux

Security practice

  • Vulnerability scanning and remediation
  • Patch management
  • Log and network analysis
  • Incident response
  • Access reviews and least privilege
  • Security awareness training
  • OWASP API Top 10 and LLM Top 10

Systems

  • Windows 10 and 11
  • Ubuntu Linux
  • Active Directory and Group Policy
  • Microsoft 365 admin and Entra ID
  • Google Workspace admin
  • iOS and Android devices

Networking

  • TCP/IP and the OSI model
  • DNS and DHCP
  • VLANs and ACLs
  • Wireless security
  • Remote access and VPN
  • Network troubleshooting

Community

  • OWASP LondonI go to the monthly meetups to keep learning and meet people in the field.
  • BSides LondonI volunteer at the conference every year.
  • Teaching friendsI run beginner offensive security sessions for my friends, which is a big part of why I took the CCEP.
  • Church livestreamI set up and run the livestream and AV for my church.

Get in touch

I'm looking for a cyber security apprenticeship where I can build strong defensive skills and get exposure to offensive security. I'm also open to junior security roles, and I'm happy to relocate.

Emailenochegere21@gmail.com LinkedInEnoch Egere TryHackMetruecelestial HackTheBoxtruecelestial CVDownload PDF