Samuel Kamuli
Forensics Investigator | IT Auditor | AWS Architect
Kampala
Summary
With over 13 years of experience in Digital Forensics, Information Technology Audit and AWS cloud Architecture. I have a strong background in Information Technology Security and Digital Forensics, having worked on multiple investigations, audit reviews and cloud security reviews
Overview
8
8
Certifications
13
13
years of professional experience
Work History
Founder and Cloud Architect
Mizaplus Consulting
Kampala
09.2017 - Current
- Advise clients on the cloud technologies to use
- Implement AWS storage and backup solutions for clients
- Develop serverless platforms
- Security reviews for Fintechs and startups using AWS
- Security incident handling
Manager Forensics Services
Uganda Revenue Authority
Kampala
01.2024 - Current
- Led the digital forensics section at Uganda Revenue Authority in handling over 200 cases involving digital Forensics and Document Examination
- Reviewed multiple cases with digital artefacts from mobile phones, servers and laptops that led to the termination of over twenty staff involved in internal fraud.
- Successfully lobbied for training of staff in EnCase, FTK, Oxygen Forensics and SANS forensics courses
- Mentored Forensics section in analysis of artefacts to discover multiple fraud schemes
Manager Information Systems Audit and Support
Uganda Revenue Authority
Kampala
03.2023 - 12.2023
- Creation of the data privacy group within the internal audit function to provide consultancy services to other revenue collection departments
- Pioneered the use of python to create ODBC connections for data analysis in a move away from expensive CAATs
- Led reviews of multiple business processes to manage risk, align to best practices such as ISO 27001 and NIST.
- Led the Penetration testing team and employed OWASP Top Ten and the MITRE ATTACK framework
- Carried out an in-depth review into the existing CI/CD delivery and recommended practices such as security tests and functionality tests written in code
Supervisor Information Systems Audit
Uganda Revenue Authority
Kampala
05.2018 - 03.2023
- Supervised and lead Internal Audit teams on Network, application and security assessments that led to the deployment of new security tools and monitoring capabilities
- Digital Forensics on secondments to a government agency where I utilized Cellebrite, FTK and Autopsy software.
- Developed the URA audit work plans for the Information Systems Audit section focused on revenue collection and raising the security bar.
- Designated the best employee of the department for the FY 2020-2021.
Officer Information Systems Audit
Uganda Revenue Authority
Kampala
02.2013 - 05.2018
- Carried out the first audits on UTM device (VPN, Firewall and other security tools)
- Produced the first advisory on the VMware VCE environment
- Performed the first Value of IT Audit on various tools to assess the effectiveness of the tools for the organization, this helped improve their usage within URA
- Helped IT security with security incident investigations and remediation in advisory capacity
- Championed the case for security automation and IT policy updates and improvement
- Audits on network and application performance that contributed to the decision to invest in monitoring tools
Education
Bachelor of Business Computing -
Makerere University Business School
Kampala, UgandaSkills
IT Security reviews
Cloud security management
Infrastructure as Code
Digital Forensics
Serverless Development
Certification
Cellebrite Mobile Forensic Fundamentals
Timeline
Manager Forensics Services
Uganda Revenue Authority
01.2024 - Current
Manager Information Systems Audit and Support
Uganda Revenue Authority
03.2023 - 12.2023
Supervisor Information Systems Audit
Uganda Revenue Authority
05.2018 - 03.2023
Founder and Cloud Architect
Mizaplus Consulting
09.2017 - Current
Officer Information Systems Audit
Uganda Revenue Authority
02.2013 - 05.2018
Bachelor of Business Computing -
Makerere University Business School
KEY ACHIEVEMENTS
- Discovery of Fraud schemes: During an internal investigation involving multiple IT systems, carried out analyses that led to discovery of multiple fraud schemes and termination of parties involved
- Security Reviews: In my previous roles in Information systems audit, I led teams and participate in successful identification of vulnerabilities and process gaps. As a consultant, I have led well architected reviews and helped startups with incident handling cases