Senior Specialist – Cyber Security Assurance

About the role

Safaricom is seeking a Senior Specialist to lead its Cyber Security Assurance function. You will ensure that security‑by‑design principles are embedded across all projects and conduct rigorous penetration testing to protect the company’s digital assets.

Key responsibilities

• Manage the Security and Privacy by Design Assurance (SPDA) processes for all initiatives.
• Perform internal and external penetration tests on infrastructure, web applications, APIs, and network systems.
• Assess and validate the security of new and existing products against company policies and industry standards.
• Safely exploit identified vulnerabilities to evaluate risk impact.
• Design and architect cybersecurity solutions that are secure, performant, and scalable.
• Collaborate with IT teams to integrate secure systems and ensure compliance with cybersecurity requirements.
• Conduct threat modeling and risk assessments during the design phase.

Required profile

• Degree in Information Security, Computer Forensics, Computer Science, IT or a related technical field.
• Minimum 4 years of experience in penetration testing or ethical hacking.
• Strong analytical, problem‑solving and communication skills.

Required skills

• Kali Linux, Burp Suite, Metasploit, Nessus
• Python, Bash, Ruby, PowerShell, JavaScript
• Deep knowledge of TCP/IP, DNS, HTTP/S, SSL/TLS
• Understanding of common attack techniques such as SQL injection, XSS, CSRF, buffer overflow