Cyber Security Administrator – Offensive Security

About the role

The Cyber Security Administrator will protect Kenya Airways' information systems and digital assets by leading offensive security activities such as penetration testing, red‑team simulations and vulnerability assessments. The role requires an attacker‑mindset, creativity and the ability to turn technical findings into actionable remediation.

Key responsibilities

• Plan, scope and execute penetration tests on networks, web, API, mobile, cloud and infrastructure assets.
• Simulate advanced persistent threats and real‑world attacks to validate security controls.
• Conduct regular vulnerability scans, analyse findings and prioritize remediation based on risk and business impact.
• Produce detailed reports with proof‑of‑concept evidence and present results to technical teams and senior management.
• Support incident response with attacker‑perspective analysis and contribute to SIEM tuning and detection rule development.

Required profile

• 3+ years of hands‑on offensive security experience, including penetration testing and ethical hacking.
• Bachelor’s degree in Information Technology or related field.
• Strong analytical, problem‑solving and communication skills with high integrity.
• Passion for continuous learning and responsible disclosure practices.

Required skills

• Penetration testing and red‑team methodologies.
• Linux commands, scripting (e.g., Bash, Python) and Windows security controls.
• Network protocols and common attack vectors.
• Security tools for scanning, exploitation and analytics.
• SIEM platforms, vulnerability management and forensic analysis.