Cybersecurity Engineer (Contract)

About the role

Ravnok is seeking an experienced, hands-on Cybersecurity Engineer to deliver client security assessments, implement approved remediation and run scheduled security-control reviews. The work is remote within Kenya, with agreed client visits, and the engineer works alongside the founder and a GRC consultant. This is a paid contractor position, not a guaranteed monthly salary; fees are agreed per engagement.

Key responsibilities

• Assess: help define technical scope, review IAM, MFA, admin privileges and offboarding, check email, endpoint, cloud, backup and logging settings, run authorised vulnerability scans and document findings and remediation recommendations.
• Build: prepare remediation plans, implement approved improvements, coordinate with client IT teams, developers and vendors, document changes and rollback arrangements, retest findings and write technical handover notes.
• Manage: run scheduled access and control reviews, track vulnerabilities and remediation progress, flag configuration drift, contribute to client reports and incident-readiness activities.

Required profile

• Demonstrable hands-on experience in security engineering, systems security, cloud security or technical security consulting.
• Ability to plan and implement production changes safely, with clear technical writing and good judgment on technical limits.
• Reliable communication, documentation and deadline management.
• Certifications are welcome but practical competence matters more.

Required skills

• Identity security, endpoint protection, patching, backups and vulnerability management.
• Strong capability in at least one environment such as Microsoft 365, Google Workspace, AWS, Azure or GCP.
• Nice to have: scripting, web/API security, penetration testing, log analysis and incident response.

To apply, send your CV or LinkedIn profile, two project examples, a redacted technical report or sample, your main platforms and specialisms, and your availability and rates by email.