Cyber Security Administrator – Offensive Operations

About the role

The Cyber Security Administrator will protect Kenya Airways' information systems and digital assets by leading offensive security operations. You will conduct penetration testing, red‑team simulations, adversary emulation, and vulnerability assessments to uncover and remediate weaknesses before they are exploited.

Key responsibilities

• Identify, assess, and manage cybersecurity risks through defensive analysis and offensive testing.
• Develop and implement risk‑mitigation strategies based on threat monitoring and incident analysis.
• Deploy, configure, and maintain security technologies such as SIEM, EDR/XDR, encryption, and SOAR platforms.
• Lead incident investigations, coordinate response actions, and improve incident‑response playbooks.
• Consume threat‑intelligence feeds and operationalize adversary TTPs to update detection rules.
• Execute vulnerability assessments, penetration tests, and adversary‑emulation exercises mapped to the MITRE ATT&CK framework.
• Collaborate with developers, engineers, SOC analysts, and auditors on security reviews and purple‑team exercises.
• Ensure all defensive systems are patched, updated, and operating with high availability.

Required profile

• Strong analytical and critical‑thinking abilities with an attacker’s mindset.
• Excellent communication and interpersonal skills, able to convey technical findings to non‑technical stakeholders.
• High integrity, self‑motivation, and a commitment to continuous learning in cybersecurity.

Required skills

• Hands‑on experience with SIEM platforms and vulnerability‑scanning tools.
• Proficiency in penetration testing, ethical hacking, and MITRE ATT&CK‑based adversary emulation.
• Knowledge of EDR/XDR, encryption solutions, and SOAR workflow automation.
• Strong Linux command‑line, scripting, and Windows security‑control expertise.
• Understanding of networking protocols, common attack vectors, and security standards such as PCI DSS, NIST, ISO 27001, GDPR, IOSA.