Add profile: Kenneth Martey (@1kennethm)

engineers/1kennethm.md

@@ -0,0 +1,52 @@
+---
+name: "Kenneth Martey"
+github: "1kennethm"
+specializations:
+  - "Compliance Automation"
+  - "Identity & Access Management"
+  - "Incident Response"
+  - "Risk Management"
+  - "Security Operations"
+  - "Third-Party Risk"
+  - "Vulnerability Management"
+title: "GSOC-Security"
+company: "Meta"
+location: "San Diego CA"
+linkedin: "https://www.linkedin.com/in/kenneth-martey-a9346713b/"
+frameworks:
+  - "ISO 27001"
+  - "ISO 27017"
+  - "NIST 800-53"
+  - "NIST CSF"
+  - "NIST RMF"
+  - "SOC 2"
+available_for:
+  - "hiring"
+  - "freelance"
+  - "collaboration"
+projects:
+  - name: "NIST RMF Control Assessment & Remediation Tracking | 2026"
+    description: "● Evaluated selected NIST SP 800-53 controls in an Ubuntu/Wazuh lab, documented control findings, and recorded outstanding remediation in a Plan of Action and Milestones (POA&M). ● Implemented and tested firewall restrictions and targeted package updates, verified service recovery and agent connectivity after reboot, and documented remaining gaps to support a simulated authorization recommendation."
+---
+
+## About Me
+
+I'm a security operations professional and CompTIA Security+ certified, with a background in business management, and risk identification. I currently serve as a Global Security Operations Center (GSOC) Shift Lead at Meta, where I oversee security operations, identify potential risks, enforce security procedures, and coordinate with different teams to address security concerns. My experience has taught me the importance of accountability, clear communication, and maintaining effective security controls.
+
+My interest in GRC has led me to develop hands-on technical skills through projects involving NIST SP 800-53, RMF, Linux, and Wazuh SIEM. Most recently, I completed a simulated security assessment where I evaluated security controls, identified gaps, implemented corrective measures, and documented outstanding risks in a Plan of Action and Milestones (POA&M).
+
+What interests me most about GRC is the opportunity to connect technical security practices with business objectives, helping organizations understand their risks and make informed decisions. I'm currently expanding my knowledge of compliance frameworks, security assessments, and audit processes while connecting with others in the GRC community. I take pride in my work ethic, willingness to learn, and ability to work with people from different backgrounds, and I'm excited to continue growing in this field.
+
+## Experience Highlights
+
+- CompTIA Security+ Certified (SY0-701) – Foundational knowledge of cybersecurity, risk management, security controls, and governance.
+- GSOC Shift Lead | Meta – Lead security operations, enforce established procedures, identify security risks, document incidents, and coordinate corrective actions across departments.
+- NIST RMF Security Assessment Project – Assessed selected NIST SP 800-53 controls in an Ubuntu Linux environment, identified security gaps, and documented findings and remediation recommendations.
+- POA&M Development – Documented outstanding security findings, corrective actions, and remediation needs as part of a simulated authorization assessment.
+- Security Control Implementation – Configured Linux firewall restrictions, applied security updates, and verified system functionality and monitoring connectivity.
+- SIEM Monitoring & Security Analysis – Used Wazuh to investigate authentication failures, privilege escalation activity, and file integrity alerts.
+- Business Management & Leadership – Bachelor's degree in Business Management and Administration, with experience managing operations, coordinating teams, and communicating with stakeholders.
+
+## Get in Touch
+
+Kennethmartey1@gmail.com