Cyber Security Administrator – Offensive Security

About the role

The Cyber Security Administrator will protect Kenya Airways' information systems and digital assets by leading offensive security operations. You will conduct penetration tests, red‑team simulations, adversary emulations and vulnerability assessments to uncover and remediate weaknesses before they can be exploited.

Key responsibilities

• Plan, scope and execute penetration tests on networks, web, API, mobile, cloud and infrastructure assets.
• Simulate advanced persistent threats and real‑world attacks to validate security controls.
• Perform regular vulnerability scans, analyse findings and prioritise remediation based on risk.
• Develop custom security analytics models and contribute to SIEM tuning and detection rule creation.
• Produce detailed reports with proof‑of‑concept evidence and present findings to technical teams and senior management.
• Support incident‑response investigations with attacker‑perspective analysis and assist audit teams during security assessments.

Required profile

• Bachelor’s degree in Information Technology or related field.
• 3+ years of hands‑on offensive security experience, including penetration testing and vulnerability assessments.
• Industry certifications such as OSCP, OSWE, CEH, GPEN, GWAPT or equivalent.
• Strong analytical mindset, high integrity and a commitment to responsible disclosure.

Required skills

• Penetration testing and red‑team operations
• Adversary emulation and APT simulation
• Linux command line and scripting (Bash, PowerShell)
• Windows security controls configuration
• Network protocol analysis and common attack vectors
• Security testing tools (e.g., Metasploit, Burp Suite, Nmap)
• Web, API, mobile and cloud application security testing
• SIEM tuning and custom security analytics development
• Incident response analysis and forensic techniques