PORTFOLIO

Siyabonga Moyo

0%

Siyabonga Moyo

AVAILABLE FOR OPPORTUNITIES

Siyabonga Moyo

~/

BSc Software Engineering student exploring the intersection of artificial intelligence, cybersecurity, and secure software development.

View Projects Get in Touch

↓ scroll

ABOUT

Background

I'm a BSc Software Engineering student with a passion for cybersecurity. I build and experiment in my home lab, where i work with Windows Server (Active Directry), Kali Linux, and virtualized environments to learn network security, enumaration, and defence fundamentals.

Beyond the home lab i sharpen my skills on TryHackMe through hands-on labs covering networking, web security, Linux and CTF challenges.

More recently I've been combining that security foundation with AI, starting with CyberSec AI, a fully offline RAG assistant I built from scratch to learn how local LLMs, embeddings, and vector search actually work, then applying those same foundations to Sentra: an intrusion detection system that explains its own reasoning using SHAP, adapts to a network's own traffic baseline, and runs a local LLM to summarize alerts for an analyst, all without sending any data to the cloud.

LOCATION Bulawayo, Zimbabwe
FIELD Cybersecurity and Software Engineering
FOCUS Cybersecurity · AI/ML · Secure Full-Stack Software Development
STATUS Open for opportunities
LANGUAGES English · Ndebele · Shona

PROJECTS

Featured Work

sentra.py

Sentra — AI-Powered SOC Copilot

An intrusion detection system that explains its own decisions. Trained a Random Forest classifier on real network traffic (99.9% recall across brute-force and DoS attacks), added a SHAP explainability layer, a custom baseline-learning module that adapts to what's "normal" for a specific network, MITRE ATT&CK mapping, and a locally-run LLM (Llama 3.2 via Ollama) that turns raw detections into plain-English analyst summaries — no cloud dependency.

Skills gained

Machine Learning SHAP / Explainable AI Local LLMs (Ollama) MITRE ATT&CK
cybersec_ai.py

CyberSec AI — Local LLM Cybersecurity Assistant

A fully offline retrieval-augmented generation (RAG) assistant built from first principles as groundwork for Sentra — no paid API, no cloud dependency. Documented every stage from a single Ollama API call through prompt engineering and conversation memory, to embeddings (nomic-embed-text), a FAISS vector index with save/load persistence, and automatic re-indexing when the knowledge base changes. Includes a public build log with the real bugs hit along the way (an IndexError, a retrieval-scoring issue still being investigated).

Skills gained

RAG Pipelines Embeddings FAISS Prompt Engineering
homelab-setup.sh

Home Lab Build

Built a home lab using VirtualBox, Windows, and Kali Linux to create a safe, isolated environment for hands-on security practice.

Skills gained

VirtualBox Kali Linux Virtualization Windows Administration
nmap-scan.sh

Nmap Network Scan

Performed an Nmap network scan against home lab targets and documented the findings, including open ports, services, and potential attack surface.

Skills gained

Nmap Network Scanning Reconnaissance Documentation
traffic-analysis.sh

Traffic Capture & Analysis

Captured and analyzed network traffic using Wireshark, examining packet contents to identify protocols, patterns, and anomalies.

Skills gained

Wireshark Packet Analysis Network Traffic Protocol Analysis
security-scripts.py

Security Automation Scripts

Wrote Python scripts for security-related tasks such as password generation and log parsing, automating repetitive parts of the analysis workflow.

Skills gained

Python Scripting Automation Log Parsing
smb-enum.sh

SMB Enumeration & Share Access

Probed SMB for known vulnerabilities, enumerated shares, and browsed an authenticated session to demonstrate real access risk once credentials are compromised.

Skills gained

Nmap NSE smbclient Enumeration Access Control
kerberoast.py

Active Directory & Kerberoasting

Promoted the lab server to a domain controller, built out OUs and user accounts, then executed a full Kerberoasting attack as a low-privilege user — extracting and attempting to crack a service account's ticket hash.

Skills gained

Active Directory Impacket Kerberoasting John the Ripper

SOFTWARE ENGINEERING BACKGROUND

interntrack.sh

InternTrack

A full-stack internship application tracker taking students from application to offer with a clean dashboard view across every company applied to.

Skills gained

React Flask MySQL Deployment
zimjobmatch.sh

ZimJobMatch

An AI-powered job aggregation and matching platform for the Zimbabwean job market, built as a team project using vector-based matching.

Skills gained

React TypeScript FastAPI PostgreSQL

EDUCATION

Certifications & Education

CISCO 2026

Introduction To Cybersecurity

Cyberscurity fundamentals Risk Management & Threat Awareness Network & System Security
TryHackMe 2026

Pre Security

Networking Fundamentals Linux & Windows Fundamentals Cybersecurity & Threat Fundamentals
CyberEd 2026

Certified Offensive Security Explorer

Ethical Hacking Host & Networking Penetration Testing Web Application Penetration Testing
UNIVERSITY In Progress

BSc Software Engineering

Python Programming Operating System Concepts Database & Web Application Security

SKILLS

Technical Proficiency

AI & MACHINE LEARNING

Python (AI/ML Development)80%
Machine Learning (scikit-learn)76%
Explainable AI (SHAP)72%
Local LLMs (Ollama)74%
RAG & Vector Search (FAISS)72%
MITRE ATT&CK Mapping70%

SECURITY FUNDAMENTALS

Network Security78%
Linux80%
Threats & Vulnerabilities76%
Web Security / CTFs74%

SECURITY TOOLS

Nmap78%
Wireshark76%
VirtualBox / Kali Linux82%
Python (Security Scripting)78%

SOFTWARE ENGINEERING BACKGROUND

React / JavaScript85%
Flask / Python80%
MySQL / Databases80%

FULL SKILL SET

Machine Learning SHAP / Explainable AI Local LLMs (Ollama) RAG Pipelines FAISS / Vector Search MITRE ATT&CK Streamlit Network Security Linux Nmap Wireshark Kali Linux Ethical Hacking Host & Networking Penetration Testing Web Application Penetration Testing VirtualBox TryHackMe CTFs Threat Analysis Log Parsing Python React Flask MySQL Git & GitHub

TERMINAL

Try it out

siyabonga@portfolio:~

CONTACT

Get in Touch

Open to entry-level security roles, SOC internships, and opportunities to apply a software engineering background to real-world security problems. Response within 24 hours.

Open to opportunities

Actively exploring entry-level cybersecurity roles — Cybersecurity Analyst, SOC Analyst, and Security Operations internships. Based in Bulawayo, Zimbabwe — open to remote.

GitHub

SiyaShez

→

Email

emmamoyo3103@gmail.com

→

LinkedIn

Siyabonga Moyo

→