We are pleased to announce the following vacancy in the Cyber Security Department within the Corporate Security division. In keeping with our current business needs, we are looking for a person who meets the criteria indicated below:
Reporting to the Senior Manager, Cyber Security Strategy & Design, the successful candidate will lend support in ensuring all new and existing systems/products/services comply with Safaricom's security policies & standards and other industry best practices e.g. ISO27001, CIS, Vodafone CSB standards etc... The candidate will also provide timely security assurance reports and advice to the business when required even with very tight timelines.
Key Responsibilities:
- Conduct periodic security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure
- Ensure all new and existing systems/products/services comply with Company's security policies & standards and other industry best practices e.g. ISO27001, CIS and Kenya Data Protection Act
- Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
- Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
- Define Cyber Security metrics and report periodically on security compliance across all networks/systems
- Research on new threats/technologies/vulnerabilities/security design principles etc.
QUALIFICATIONS
- Degree in Information Security/Computer Forensics/Computer Science/Information Technology or other relevant Technical Degree
- Information security certifications e.g. CEH/CISSP/CISM/CISA/GIAC/CPTP/OSCP
- Advanced Networking certifications: CCNA/CCNP/CCSP/CCIE are also preferred
- Certifications in Microsoft Windows and Linux/Unix Operating Systems
- Demonstrate competency in the use and administration of ethical hacking tools e.g. KALI Linux, Metasploit, Nexpose, Nessus, Nmap, BurpSuite etc…
- Minimum of 3 years’ working experience in Information Systems Security – e.g. Ethical Hacking, Penetration Testing, Vulnerability Assessments, Pre-and-Post Implementation System Reviews, etc
- Minimum of 3 years’ working experience in Networking and Operating Systems e.g. Cisco, Huawei, Windows (All), Unix, Linux etc
- Minimum of 3 years’ working experience in Web and Mobile applications technologies e.g. Java, Python, PHP, Javascript, CSS, Apache, Nginx, IIS etc
- Working knowledge of databases e.g. Oracle, MSSQL, MongoDB, Postgress etc will be an added advantage
- Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc will be an added advantage
- Working knowledge of Cloud technologies e.g. AWS and Azure will be an added advantage
- Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, Github, Gitlab etc will be an added advantage
- Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD etc will be an added advantage
- Excellent communication skills and a good team player
- Excellent time management skills i.e. getting things done in a timely manner
- Excellent report writing and presentation skills
- Very analytical and keen on details
- Customer obsessed
Note to Applicants
As part of the interview process, external candidates should prepare the following documentation which will be required as soft copies at a later stage based on your performance in the interviews/assessments.
a) An updated CV with contacts of three referees, 2 who must be professional and must have supervised you at some point, the other referee can be a colleague in the same professional field.
b) Kenyan Certificate of Good Conduct (Less than 1 year old) or a receipt of the same from the CID pending release of the hardcopy document.
c) Clearance certificate from a reputable Credit Reference Bureau (CRB).
d) University Diploma/Degree Certificate/ Letter of completion from University in case you have not received your diploma/degree certificate.
e) National ID/Passport.
How To Apply
If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to update your candidate profile on the recruitment portal and then Click on the apply button. Remember to attach your resume.
Persons with Disabilities (PwD) and Female candidates are highly encouraged to apply.