Reporting to the Senior Manager, Cyber Secure by Design , the Senior Officer – Cyber Secure by Design will support Safaricom’s security assurance program by embedding security into all products, platforms, and services before go-live. The role will also provide timely security assurance reports and advice to the business when required, and within very tight timelines. The Senior Officer will also support other Cyber Secure by Design practices, including Red Teaming, bug bounty, and DevSecOps.
Security Assurance for Projects
• Conduct periodic security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure
• Ensure all new and existing systems/products/services comply with Company's security policies & standards and other industry best practices e.g. ISO27001, CIS and Kenya Data Protection Act
• Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
• Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
• Define Cyber Security metrics and report periodically on security compliance across all networks/systems
Bug Bounty Program Management
• Drive the remediation of the identified/reported bug bounty findings and integrate the learnings to different areas of application.
Red Teaming & Offensive Security
• Carry out red team exercises, providing input to scope, reviewing findings, and tracking remediation progress. Deliver insights on risks, while fostering purple team collaboration and continuous upskilling in offensive security.
DevSecOps Strategy & Tooling Governance
• Ensure CI/CD pipelines integrate required security tools and practices. Carry out developer security training to embed secure coding practices.
Knowledge share
• Conduct knowledge share sessions on new areas of technology, bug bounty learning, read teaming findings within the squads and larger organization.
Research & Development
• Conduct research and development on emerging areas in security.
• Present findings for sensitization and knowledge transfer to other team members and staff.
Health & Safety
• Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work
• All employees have a responsibility to adhere to safety, health, and wellbeing policies.
Qualifications• Degree in Information Security/Computer Forensics/Computer Science/Information Technology or other relevant Technical Degree
• Information security certifications e.g. CEH/CISSP/CISM/CISA/GIAC/CPTP/OSCP
• Networking certifications: CCNA/CCNP/CCSP are also preferred
• Certifications in Microsoft Windows and Linux/Unix Operating Systems
• Demonstrate competency in the use and administration of ethical hacking tools e.g. KALI Linux, Metasploit, Nexpose, Nessus, Nmap, Burp Suite etc.
• Minimum of 3 years’ working experience in Information Systems Security – e.g. Ethical Hacking,
• Penetration Testing, Vulnerability Assessments, ICT Audits, Pre-and-Post Implementation System Reviews etc.
• Minimum of 3 years’ working experience in Networking and Operating Systems e.g. Cisco, Huawei, Windows (All), Unix, Linux etc.
• Minimum of 3 years’ working experience in Web and Mobile applications technologies e.g. Java, Python, PHP, Javascript, CSS, Apache, Nginx, IIS etc.
• Working knowledge of databases e.g. Oracle, MSSQL, MongoDB, Postgres etc. will be an added advantage
• Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc. will be an added advantage
• Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, GitHub, Gitlab etc. will be an added advantage
• Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD etc. will be an added advantage
• Experience operating within squads/tribes, driving security automation adoption across engineering, operations, cloud, and digital product teams.
• Excellent communication skills and a good team player
• Excellent time management skills i.e. getting things done in a timely manner
• Excellent report writing and presentation skills
• Very analytical and keen on details
• Customer obsessed
How to Apply. If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to create/ update your candidate profile on the recruitment portal, fill in all your work experiences and certifications then Click on the apply button. Remember to attach your resume.
About UsSafaricom is the leading technology company in East Africa. Our purpose is to transform lives by connecting people to people, people to opportunities and people to information. We keep over 60 million customers connected across Kenya and Ethiopia, and play a critical role in the society, supporting over 1.13 million jobs both directly and indirectly while our total economic value was estimated at KES 1.1 trillion ($ 8.5 billion) for the 12 months through March 2025.
Listed on the Nairobi Securities Exchange and with annual revenues of close to KES 388 billion as at March 2025, Safaricom provides connectivity through wide range of technology. Our 2G, 3G, 4G and 5G network in aggregate covers over 99% of Kenya’s population.
We run the world’s largest mobile payment system and Africa’s largest Fintech, M-PESA, the world’s first mobile money transfer system. By empowering millions of customers to transact, save or borrow money through their mobile phone, M-PESA has driven financial inclusion in Kenya to 84.8% of the adult population in 2024, from a low of 26.7% in 2006, and generated over KES 161 billion in revenue as at FY25.
Our subsidiary, Safaricom Telecommunications Ethiopia, has deployed world class network and services to contribute to Ethiopia’s digital transformation.
Safaricom is an equal opportunity employer, actively recruiting staff from different backgrounds reflecting the communities that we serve. We are committed to equal gender representation at all levels.
As part of our ongoing commitment to the Sustainable Development Goals (SDGs), we continue to work towards improving energy and resource efficiency in our network and facilities to reduce carbon emissions and our fuel consumption. We remain committed to becoming a Net Zero carbon-emitting company by 2050.
Skills Required
- Degree in Information Security, Computer Forensics, Computer Science, Information Technology, or another relevant technical field
- Information security certification such as CEH, CISSP, CISM, CISA, GIAC, CPTP, or OSCP
- Minimum three years of experience in information systems security, ethical hacking, penetration testing, vulnerability assessment, ICT audits, or system reviews
- Minimum three years of experience with networking and operating systems, including Cisco, Huawei, Windows, Unix, or Linux
- Minimum three years of experience with web and mobile application technologies, including Java, Python, PHP, JavaScript, CSS, Apache, Nginx, or IIS
- Competency administering ethical hacking tools such as Kali Linux, Metasploit, Nexpose, Nessus, Nmap, and Burp Suite
- Experience operating within squads or tribes and driving security automation adoption across engineering, operations, cloud, and digital product teams
- Excellent communication, teamwork, time management, report writing, presentation, analytical, and attention-to-detail skills
- Networking certification such as CCNA, CCNP, or CCSP
- Certification in Microsoft Windows or Linux/Unix operating systems
- Working knowledge of databases such as Oracle, Microsoft SQL Server, MongoDB, or PostgreSQL
- Working knowledge of virtualization and microservices technologies such as VMware, OpenShift, Kubernetes, or Docker
- Working knowledge of DevSecOps technologies and practices, including Jenkins, Jira, GitHub, or GitLab
- Working knowledge of mobile and GSM technologies, including Android, iOS, 2G, 3G, LTE, or USSD
What We Do
Safaricom is the leading provider of converged communication solutions in Kenya. In addition to providing a broad range of first-class products and services for Telephony, Broadband Internet and Financial services, Safaricom seeks to uplift the welfare of Kenyans through value-added services and support for community projects. With over 29 Million subscribers and an estimated market share of 67%, the Company has the widest modern mobile network coverage in Kenya and prides in its experienced shareholders, attractive tariffs, a nationwide network of effective dealers, high caliber staff and management enabling it to maintain its position as the region’s mobile market leader. M-PESA has over 23 million subscribers, supported by a nationwide agent network of over 156,000 outlets. M-PESA is the world's most developed biggest mobile payment system. Facts about Safaricom • Employs over 5,500 staff directly and over 500,000 indirectly • Has approximately 4,945 network sites across the country • 50% of employees and 32% of senior management working at Safaricom are women. • Has the largest call center in Sub-Saharan Africa Our people are our most valuable asset and are key to the achievement of our vision of transforming lives. This is reflected in our commitment to creating a working environment that supports our staff. We offer employees a wellness programme, crèche facilities, access to subsidized gym facilities, leisure amenities, regular social events, competitive salaries and career opportunities. We give back to the society through the Safaricom Foundation. Since inception, the foundation has disbursed 2 billion shillings in different initiatives that provide sustainable community-based solutions, contributing towards Kenya’s development agenda, and the Millennium Development Goals. Safaricom is a key member and supporter of the B Team and the B Team – Africa, alliances of business leaders who are committed to responsible and sustainable business practices.
