Senior Officer, Cyber Secure by Design
AI job insight
Senior cybersecurity role at Safaricom Kenya in Nairobi focused on embedding security into products, platforms, and services before go-live. Responsibilities include vulnerability assessments, penetration tests, red teaming, bug bounty program management, and DevSecOps governance.
- Embeds security into Safaricom products, platforms, and services before go-live
- Conducts periodic security reviews, vulnerability assessments, and penetration tests
- Ensures compliance with ISO27001, CIS benchmarks, and the Kenya Data Protection Act
Similar jobs
More roles you may want to review before you leave.AI summary
Senior cybersecurity role at Safaricom Kenya in Nairobi focused on embedding security into products, platforms, and services before go-live. Responsibilities include vulnerability assessments, penetration tests, red teaming, bug bounty program management, and DevSecOps governance.
- Embeds security into Safaricom products, platforms, and services before go-live
- Conducts periodic security reviews, vulnerability assessments, and penetration tests
- Ensures compliance with ISO27001, CIS benchmarks, and the Kenya Data Protection Act
- Manages bug bounty program and drives remediation of reported findings
- Supports red teaming, offensive security, and purple team collaboration
- Governs DevSecOps tooling and CI/CD pipeline security integrations
- Full-time senior role based in Nairobi, reporting to the Senior Manager, Cyber Secure by Design
AI job guide
Use this guide to check salary signals, requirements, documents, application steps and safety before you apply.
AI salary guide
Not enough public dataNot enough public salary data is available for this exact role. Before applying, prepare to ask about gross pay, benefits, contract length, probation period, transport and any allowances.
Can you qualify for this role?
- UnclearRelated work experienceThe text mentions experience, but the exact level should be confirmed at source.
- RequiredEducation or certification mentioned in the postThe captured text mentions education, a diploma, certificate, or licence.
- PreferredPractical evidence in security, part_time, segurancaThe tags and summary point to skills connected with this role.
- RequiredAvailability to work in NairobiThe vacancy is associated with this location.
- UnclearComfort with the Full Time contract termsConfirm hours, duration, probation and benefits at the original source.
Documents to prepare
- Likely requiredUpdated CV
- Role specificCover letter or short employer message
- OptionalProfessional references
- Role specificAcademic or professional certificates
- VerifyID or passport only after verifying the employer
Application tips for this job
- Place your strongest Senior Officer, Cyber Secure by Design evidence in the first half of your CV.
- In your cover letter or employer message, connect your experience to Safaricom Kenya and the role in Nairobi.
- Add concrete examples related to security, part_time, seguranca, ideally with measurable outcomes or clear responsibilities.
- Follow the instructions from JobWeb Kenya; avoid sending documents to unofficial contacts or copied links.
- Confirm the deadline, interview location and employer contact before sharing personal documents.
- Prepare a polite question about pay, benefits and contract terms for later interview stages.
Source and safety check
- JobWeb Kenya
- Original source link available
- Application method is clear
- Deadline not specified
- No major risk signal was detected in the captured text.
Never pay for interviews, shortlisting, medical checks, uniforms, or job placement. Confirm every application at the original source before sharing personal documents. Report suspicious listing.
Interview preparation
- What experience makes you a strong fit for this Senior Officer, Cyber Secure by Design role in security, part_time?
- How have you handled responsibilities similar to those in this job post?
- Are you available to work in Nairobi under the listed contract or schedule?
- Prepare examples with clear responsibilities, tools used and measurable outcomes.
- Review the source and research Safaricom Kenya before the interview.
Ask what the first priorities will be in the role and how success will be measured.
Similar jobs to consider
Use AI to apply better
After confirming the original source, use Career Assistant to check role fit, tailor your CV and prepare a cover letter or employer message.
Original source description
Reporting to the Senior Manager, Cyber Secure by Design , the Senior Officer – Cyber Secure by Design will support Safaricom’s security assurance program by embedding security into all products, platforms, and services before go-live. The role will also provide timely security assurance reports and advice to the business when required, and within very tight timelines. The Senior Officer will also support other Cyber Secure by Design practices, including Red Teaming, bug bounty, and DevSecOps.
Key Accountabilities
- Security Assurance for Projects
- Conduct periodic security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure
- Ensure all new and existing systems/products/services comply with Company’s security policies & standards and other industry best practices e.g. ISO27001, CIS and Kenya Data Protection Act
- Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
- Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
- Define Cyber Security metrics and report periodically on security compliance across all networks/systems
- Bug Bounty Program Management
- Drive the remediation of the identified/reported bug bounty findings and integrate the learnings to different areas of application.
- Red Teaming & Offensive Security
- Carry out red team exercises, providing input to scope, reviewing findings, and tracking remediation progress. Deliver insights on risks, while fostering purple team collaboration and continuous upskilling in offensive security.
- DevSecOps Strategy & Tooling Governance
- Ensure CI/CD pipelines integrate required security tools and practices. Carry out developer security training to embed secure coding practices.
- Knowledge share
- Conduct knowledge share sessions on new areas of technology, bug bounty learning, read teaming findings within the squads and larger organization.
- Research & Development
- Conduct research and development on emerging areas in security.
- Present findings for sensitization and knowledge transfer to other team members and staff.
- Health & Safety
- Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work
- All employees have a responsibility to adhere to safety, health, and wellbeing policies.
Qualifications
- Degree in Information Security/Computer Forensics/Computer Science/Information Technology or other relevant Technical Degree
- Information security certifications e.g. CEH/CISSP/CISM/CISA/GIAC/CPTP/OSCP
- Networking certifications: CCNA/CCNP/CCSP are also preferred
- Certifications in Microsoft Windows and Linux/Unix Operating Systems
- Demonstrate competency in the use and administration of ethical hacking tools e.g. KALI Linux, Metasploit, Nexpose, Nessus, Nmap, Burp Suite etc.
- Minimum of 3 years’ working experience in Information Systems Security – e.g. Ethical Hacking,
- Penetration Testing, Vulnerability Assessments, ICT Audits, Pre-and-Post Implementation System Reviews etc.
- Minimum of 3 years’ working experience in Networking and Operating Systems e.g. Cisco, Huawei, Windows (All), Unix, Linux etc.
- Minimum of 3 years’ working experience in Web and Mobile applications technologies e.g. Java, Python, PHP, Javascript, CSS, Apache, Nginx, IIS etc.
- Working knowledge of databases e.g. Oracle, MSSQL, MongoDB, Postgres etc. will be an added advantage
- Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc. will be an added advantage
- Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, GitHub, Gitlab etc. will be an added advantage
- Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD etc. will be an added advantage
- Experience operating within squads/tribes, driving security automation adoption across engineering, operations, cloud, and digital product teams.
- Excellent communication skills and a good team player
- Excellent time management skills i.e. getting things done in a timely manner
- Excellent report writing and presentation skills
- Very analytical and keen on details
- Customer obsessed
