Thamsanqa Ngwenya

Cybersecurity Professional | PenTest | SecOps

Bulawayo, Zimbabwe

System_Info

Cybersecurity professional based in Bulawayo, Zimbabwe, specializing in penetration testing, security operations, and defensive security infrastructure. Currently pursuing CompTIA Security+ certification with hands-on experience deploying and managing enterprise security monitoring systems.

Strong technical foundation in Linux system administration, virtualization infrastructure, and security tooling. Passionate about building cybersecurity capability in the African market through knowledge sharing and practical security implementations.

Exploring the establishment of a cybersecurity consultancy to address the growing security needs of SMEs and enterprises across Zimbabwe and Southern Africa.

Sec+ In Progress
20+ Labs Completed
7+ Years Active Study

Experience_Log

March 2026

Advanced Security Infrastructure Deployment

Independent Research & Lab Development

Successfully deployed Wazuh SIEM across multi-platform environment (Ubuntu, Debian, Kali Linux, Windows 8, Windows 10) with active agents reporting to centralized management server. Resolved complex Elastic Stack configuration challenges including Fleet initialization and encrypted saved objects. Optimized Virtual Machine Manager (virt-manager/KVM) infrastructure for red team lab performance and resource efficiency.

2023 - Present

Independent Security Research & Training

Self-Directed Study & Lab Practice

Deep immersion in offensive and defensive security through hands-on research and lab development. Built comprehensive virtual environments for penetration testing practice, vulnerability assessment, and security monitoring. Mastering exploitation techniques, privilege escalation, post-exploitation methods, and defensive security operations through dedicated lab work, tackling real-world machine challenges, developing exploit chains, and sharpening penetration testing methodologies. Actively pursuing CompTIA Security+ certification to formalize foundational security knowledge. Developing expertise through continuous learning, CTF challenges, security lab documentation, and real-world infrastructure deployments. Building public portfolio on GitHub to contribute to the African cybersecurity community and demonstrate practical security implementation skills.

September 2021 - September 2022

Diploma in Professional Computing & Information Processing

Institute of Commercial Management (ICM), England

Student No. 2299005 | Graduated with Distinctions in Applications, Number & Logic, and Systems Analysis. Earned Credit in Programming Project. Comprehensive advanced program covering professional computing principles, systems development, and applied information processing.

2020

IT Intern

Datlabs Private Limited

One-year internship gaining hands-on experience with enterprise IT infrastructure and systems administration. Key contributions and achievements:

  • Network Security Assessment: Conducted comprehensive network vulnerability scan using Nessus Essentials. Identified critical security vulnerabilities and misconfigurations across the company network infrastructure. Compiled detailed security report with risk assessments and remediation recommendations that led to an upgrade of the company's Sophos firewall.
  • ERP reporting systems configuration and maintenance
  • Active Directory administration and user management
  • Network simulation and design using Cisco Packet Tracer
  • IT infrastructure support and technical documentation

July 2021

Certificate in Professional Computing & Information Processing

Institute of Commercial Management (ICM), England

Foundation certificate program in professional computing and information processing principles.

2018 - 2019

C++ Programming & IT Lecturer Assistant

Bulawayo Polytechnic College

Assisted with C++ programming instruction and Information Technology concepts lectures. Supported curriculum development, conducted practical lab sessions, and mentored students in programming fundamentals. Served as College Debate Secretary, fostering critical thinking and public speaking skills within the student community.

December 2019

National Certificate in Information Technology

Bulawayo Polytechnic ยท Zimbabwe Ministry of Higher & Tertiary Education

Cert No. B 155797 | Foundation program covering information technology fundamentals, systems analysis, database management, networking principles, and practical computing skills.

Tech_Stack

Offensive Security

  • Penetration Testing (Network & Web)
  • Vulnerability Assessment & Exploitation
  • Red Team Operations & Lab Development
  • Nessus Essentials (Vulnerability Scanning)
  • Security Research & Analysis

Security Operations

  • SIEM Deployment (Wazuh, Elastic Stack)
  • Security Monitoring & Threat Detection
  • Log Analysis & Correlation
  • Incident Response Planning
  • Firewall Configuration (Sophos)
  • Threat Intelligence Integration

Infrastructure & Development

  • Linux Administration (Debian, Ubuntu, Kali)
  • Virtualization (Virtual Machine Manager, KVM/QEMU)
  • Network Security Architecture
  • Python & Bash Scripting
  • C++ Programming
  • Active Directory Administration
  • Cisco Packet Tracer (Network Simulation)