Information Security Engineer

About the role

TestHiring is hiring a full-time Information Security Engineer in Nairobi, Kenya. The role covers designing secure architectures, managing security tools and controls across endpoints, cloud and networks, and working with DevOps teams to embed security into software development.

Key responsibilities

• Design secure architecture for new systems and services aligned with best practices (Zero Trust, micro-segmentation) and regulatory requirements
• Design and enforce cloud security controls (AWS, Azure, GCP)
• Configure and manage endpoint protection on laptops and devices, and tune SIEM, EDR, WAF and IAM tools
• Deploy and manage Zero Trust Network Access and privileged access management solutions
• Manage vulnerability scanning, patch coordination and security hardening of Google Workspace
• Implement key management, certificate lifecycle management and network device hardening
• Integrate security into the software development lifecycle with DevOps teams, including secure coding, code review and threat modeling
• Stay up to date on security trends and lead initiatives that improve the organization's security posture

Required profile

• Bachelor's degree in computer science, information security or a related field
• Certifications such as CISSP, CEH, CISM or OSCP are a plus
• 3+ years of experience in cybersecurity, preferably in payments, FinTech or financial services
• Practical experience with security tools (SIEM, IDS/IPS, EDR) and frameworks (PCI DSS, ISO 27001, NIST)
• Hands-on cloud security experience (AWS, GCP or Azure)
• Strong communication, collaboration and documentation skills

Required skills

• Network and cloud security concepts (firewalls, routing, segmentation)
• Tools: SIEM, IDS/IPS, EDR, WAF, IAM, vulnerability scanners
• DevSecOps: CI/CD pipelines, containerization, automation scripting
• Application security: OWASP Top 10, API security, secure coding
• Operating systems (Windows, Linux) and scripting (Python, Bash)
• Security assessments and vulnerability management