Senior Officer, Cyber Secure by Design at Safaricom Kenya

SOKIFY FEATURED JOB Senior Officer, Cyber Secure by Design Safaricom Kenya About Safaricom Safaricom stands as Kenya's premier provider of integrated communication solutions, delivering comprehensive services across telephony, broadband internet, and financial services. The organization remains committed to advancing the welfare of Kenyans through innovative value-added offerings and active community investment. The Role As Senior Officer, Cyber Secure by Design, you will report to the Senior Manager of Cyber Secure by Design and play a crucial role in embedding security into the fabric of Safaricom's products, platforms, and services before they reach customers. You will deliver critical security assurance reports and strategic advice to business stakeholders under demanding timelines, while championing complementary security initiatives including red team operations, bug bounty programs, and DevSecOps advancement. Key Responsibilities You will lead security assurance across Safaricom's technology landscape by conducting periodic security reviews, vulnerability assessments, and penetration testing on all systems and infrastructure. You will verify that all new and existing systems, products, and services meet Safaricom's security policies, industry standards including ISO27001 and CIS frameworks, and Kenya Data Protection Act requirements. Working closely with system custodians and owners, you will track remediation of identified security risks and maintain compliance reporting across networks and systems. Within bug bounty management, you will drive remediation of reported findings and integrate lessons learned into relevant application areas. You will execute red team exercises, provide scoping input, review findings, and monitor remediation progress while fostering purple team collaboration and advancing organizational offensive security capabilities. You will ensure CI/CD pipelines incorporate essential security tools and practices, deliver developer security training to strengthen secure coding practices, and conduct knowledge-sharing sessions on emerging security technologies, bug bounty insights, and red team discoveries with squads and the broader organization. You will also conduct research and development on emerging security areas and present findings for organizational awareness and knowledge transfer. Required Qualifications You must hold a degree in Information Security, Computer Forensics, Computer Science, Information Technology, or a related technical discipline. You need information security certifications such as CEH, CISSP, CISM, CISA, GIAC, CPTP, or OSCP. Preferred networking certifications include CCNA, CCNP, or CCSP. You require minimum three years of hands-on experience in information systems security, including ethical hacking, penetration testing, vulnerability assessments, ICT audits, and pre/post-implementation system reviews. You need minimum three years of professional experience with networking and operating systems including Cisco, Huawei, Windows, Unix, and Linux environments. You must have minimum three years of working experience with web and mobile application technologies such as Java, Python, PHP, Javascript, CSS, Apache, Nginx, and IIS. Certifications in Microsoft Windows and Linux/Unix operating systems, along with demonstrated competency in ethical hacking tools including KALI Linux, Metasploit, Nexpose, Nessus, Nmap, and Burp Suite, are essential. Preferred Additional Experience Working knowledge of databases such as Oracle, MSSQL, MongoDB, or Postgres; experience with virtualization and microservices technologies including VMware, OpenShift, Kubernetes, or Docker; familiarity with DevSecOps technologies and practices such as Jenkins, Jira, GitHub, or GitLab; and knowledge of mobile and GSM technologies including Android, iOS, 2G, 3G, LTE, and USSD will strengthen your application. Core Competencies You will demonstrate exceptional analytical abilities with meticulous attention to detail, excellent communication skills, and proven ability to work collaboratively within squad-based environments. You must display excellent time management capabilities, deliver polished written reports and presentations, maintain a customer-obsessed mindset, and drive adoption of security automation across engineering, operations, cloud, and digital product teams. All candidates must uphold Safaricom's code of conduct, policies, and procedures, maintaining integrity and accountability while adhering to safety, health, and wellbeing policies.