Senior Officer, Cyber Secure by Design Job Safaricom
IT Jobs, Safaricom Jobs. Senior Officer, Cyber Secure by Design embeds cybersecurity protocols and threat mitigation into system designs, requires a Computer Science/Cybersecurity Degree and 3+ years security architecture experience. Full-time role in Nairobi.
Job Description
- Reporting to the Senior Manager, Cyber Secure by Design , the Senior Officer – Cyber Secure by Design will support Safaricom’s security assurance program by embedding security into all products, platforms, and services before go-live. The role will also provide timely security assurance reports and advice to the business when required, and within very tight timelines. The Senior Officer will also support other Cyber Secure by Design practices, including Red Teaming, bug bounty, and DevSecOps.
Responsibilities
Security Assurance for Projects
- Conduct periodic security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure
- Ensure all new and existing systems/products/services comply with Company’s security policies & standards and other industry best practices e.g. ISO27001, CIS and Kenya Data Protection Act
- Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
- Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
- Define Cyber Security metrics and report periodically on security compliance across all networks/systems
- Bug Bounty Program Management
- Drive the remediation of the identified/reported bug bounty findings and integrate the learnings to different areas of application.
Red Teaming & Offensive Security
- Carry out red team exercises, providing input to scope, reviewing findings, and tracking remediation progress. Deliver insights on risks, while fostering purple team collaboration and continuous upskilling in offensive security.
- DevSecOps Strategy & Tooling Governance
- Ensure CI/CD pipelines integrate required security tools and practices. Carry out developer security training to embed secure coding practices.
Knowledge share
- Conduct knowledge share sessions on new areas of technology, bug bounty learning, read teaming findings within the squads and larger organization.
Research & Development
- Conduct research and development on emerging areas in security.
- Present findings for sensitization and knowledge transfer to other team members and staff.
Health & Safety
- Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work
- All employees have a responsibility to adhere to safety, health, and wellbeing policies.
Qualifications
- Degree in Information Security/Computer Forensics/Computer Science/Information Technology or other relevant Technical Degree
- Information security certifications e.g. CEH/CISSP/CISM/CISA/GIAC/CPTP/OSCP
- Networking certifications: CCNA/CCNP/CCSP are also preferred
- Certifications in Microsoft Windows and Linux/Unix Operating Systems
- Demonstrate competency in the use and administration of ethical hacking tools e.g. KALI Linux, Metasploit, Nexpose, Nessus, Nmap, Burp Suite etc.
- Minimum of 3 years’ working experience in Information Systems Security – e.g. Ethical Hacking,
- Penetration Testing, Vulnerability Assessments, ICT Audits, Pre-and-Post Implementation System Reviews etc.
- Minimum of 3 years’ working experience in Networking and Operating Systems e.g. Cisco, Huawei, Windows (All), Unix, Linux etc.
- Minimum of 3 years’ working experience in Web and Mobile applications technologies e.g. Java, Python, PHP, Javascript, CSS, Apache, Nginx, IIS etc.
- Working knowledge of databases e.g. Oracle, MSSQL, MongoDB, Postgres etc. will be an added advantage
- Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc. will be an added advantage
- Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, GitHub, Gitlab etc. will be an added advantage
- Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD etc. will be an added advantage
- Experience operating within squads/tribes, driving security automation adoption across engineering, operations, cloud, and digital product teams.
- Excellent communication skills and a good team player
- Excellent time management skills i.e. getting things done in a timely manner
- Excellent report writing and presentation skills
- Very analytical and keen on details
- Customer obsessed
How to Apply
1. Applying For Jobs That You Qualify But Not Getting Interviews?
Click Here And Get An Expert Review Of Your CV From Our Recruitment Team Plus 3 Months Job Search Assistance. Land Your Next Job Faster.
2. Register your CV with us today for a better job.
Upload your CV to be considered for jobs that match your skills, experience and career level. Upload your CV here — It's free.
3. Stay relevant in a competitive job market.
Register for short professional courses starting next month. See courses starting next month.
4. Pass Your Next Job Interview With Confidence
Learn how to confidently sell your value and negotiate best salary in interviews. Click here for interview preparation. Interview with confidence.
Job Seeker Testimonials
Since 2011 Corporate Staffing has helped over 13,000 job seekers across Kenya secure new jobs with our clients. Read our job seekers’ success stories here.