Cyber Security Administrator (Operations)

About the role

The Cyber Security Administrator will protect Kenya Airways' information systems and digital assets through offensive security operations such as penetration testing, red‑team simulations and vulnerability assessments. The role requires a hands‑on professional with an attacker mindset who can translate technical findings into actionable remediation.

Key responsibilities

• Identify, assess and manage cyber risks using both defensive analysis and offensive testing.
• Develop and maintain incident response plans, playbooks and SOAR workflows to automate alert triage and response.
• Implement, configure and maintain security technologies including SIEM, EDR/XDR, encryption solutions and ensure they are patched and highly available.
• Conduct penetration tests, adversary emulation exercises mapped to the MITRE ATT&CK framework and collaborate with SOC analysts in purple‑team activities.
• Consume threat intelligence feeds, update detection rules and block emerging IOCs.

Required profile

• 3+ years of hands‑on experience in defensive cybersecurity operations and incident response.
• Strong analytical, problem‑solving and communication skills with the ability to work under pressure.
• Unquestionable integrity, self‑motivation and a passion for continuous learning.

Required skills

• Proficiency with SIEM platforms and vulnerability scanning tools.
• Experience in penetration testing, red‑team simulations and MITRE ATT&CK mapping.
• Hands‑on knowledge of SOAR automation, EDR/XDR, and encryption technologies.
• Linux command line, scripting, Windows security controls and networking protocols.
• Industry certifications such as CEH, CDSA, CISSP, SSCP (highly preferred).