From the employer's hiring system · Verified employer
Senior Officer, Cyber Secure by Design
Safaricom
Job at a glance
- Employer
- Safaricom
- Position
- Senior Officer, Cyber Secure by Design
- Location
- Kenya
- Job type
- Full-time
- Experience
- 3+ years in InfoSec, Networking, and App Tech
- Education
- Degree in Info Security, CS, IT or related
- Salary
- Not stated in the advert
- Application deadline
- 18 October 2026
- Posted on VacancyKE
- 12 October 2026
VacancyKE summary
Safaricom is hiring a Senior Officer to embed security into products and services before go-live. You will conduct security assurance reviews, manage bug bounty programs, lead red teaming exercises, and support DevSecOps initiatives.
What stands out about this opportunity
- Focus on embedding security pre-go-live
- Includes Red Teaming and Bug Bounty management
- Requires integration with DevSecOps pipelines
Key responsibilities
- Conduct periodic security reviews, vulnerability assessments, and penetration tests across Safaricom’s systems.
- Ensure new and existing products comply with internal policies, ISO27001, CIS, and Kenya Data Protection Act.
- Provide timely security assurance reports and advice to business stakeholders under tight deadlines.
- Follow up with system owners to ensure identified security risks are addressed within agreed timelines.
- Define cyber security metrics and report periodically on compliance across networks and systems.
- Drive remediation of bug bounty findings and integrate learnings into application areas.
- Carry out red team exercises, review findings, track remediation, and foster purple team collaboration.
- Integrate security tools into CI/CD pipelines and deliver developer training on secure coding.
Who should apply?
This role suits experienced cybersecurity professionals with strong backgrounds in ethical hacking, network security, and DevSecOps who thrive in agile squad environments.
Key requirements
- Technical degree in IT/Security
- InfoSec certification (e.g., CISSP/CEH)
- 3+ years InfoSec experience
- 3+ years Networking/OS experience
- 3+ years Web/Mobile App experience
- Ethical hacking tool proficiency
Nice to have
- Working knowledge of databases such as Oracle, MSSQL, MongoDB, or Postgres.
- Experience with Virtualization & Microservices technologies like VMware, OpenShift, Kubernetes, Docker.
- Knowledge of DevSecOps tools and practices including Jenkins, Jira, GitHub, GitLab.
- Understanding of Mobile and GSM technologies such as Android, iOS, 2G, 3G, LTE, USSD.
- Experience operating within squads/tribes and driving security automation adoption.
What you should know
- The role reports to the Senior Manager, Cyber Secure by Design.
- You must uphold company codes of conduct, safety, health, and wellbeing policies.
- Applications require creating or updating your candidate profile on the recruitment portal.
How to apply
- Create or update your candidate profile on the recruitment portal.
- Fill in all work experiences and certifications.
- Click the apply button and attach your resume.
Official source: From the employer's hiring system · egjd.fa.us6.oraclecloud.com. VacancyKE never charges job seekers.
Original employer advertisement
Published by Safaricom on egjd.fa.us6.oraclecloud.com. Shown for reference; the employer’s version is the official one.
The employer’s advert
Reporting to the Senior Manager, Cyber Secure by Design , the Senior Officer – Cyber Secure by Design will support Safaricom’s security assurance program by embedding security into all products, platforms, and services before go-live. The role will also provide timely security assurance reports and advice to the business when required, and within very tight timelines. The Senior Officer will also support other Cyber Secure by Design practices, including Red Teaming, bug bounty, and DevSecOps.
Responsibilities
Security Assurance for Projects
• Conduct periodic security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure
• Ensure all new and existing systems/products/services comply with Company's security policies & standards and other industry best practices e.g. ISO27001, CIS and Kenya Data Protection Act
• Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
• Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
• Define Cyber Security metrics and report periodically on security compliance across all networks/systems
Bug Bounty Program Management
• Drive the remediation of the identified/reported bug bounty findings and integrate the learnings to different areas of application.
Red Teaming & Offensive Security
• Carry out red team exercises, providing input to scope, reviewing findings, and tracking remediation progress. Deliver insights on risks, while fostering purple team collaboration and continuous upskilling in offensive security.
DevSecOps Strategy & Tooling Governance
• Ensure CI/CD pipelines integrate required security tools and practices. Carry out developer security training to embed secure coding practices.
Knowledge share
• Conduct knowledge share sessions on new areas of technology, bug bounty learning, read teaming findings within the squads and larger organization.
Research & Development
• Conduct research and development on emerging areas in security.
• Present findings for sensitization and knowledge transfer to other team members and staff.
Health & Safety
• Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work
• All employees have a responsibility to adhere to safety, health, and wellbeing policies.
Qualifications
• Degree in Information Security/Computer Forensics/Computer Science/Information Technology or other relevant Technical Degree
• Information security certifications e.g. CEH/CISSP/CISM/CISA/GIAC/CPTP/OSCP
• Networking certifications: CCNA/CCNP/CCSP are also preferred
• Certifications in Microsoft Windows and Linux/Unix Operating Systems
• Demonstrate competency in the use and administration of ethical hacking tools e.g. KALI Linux, Metasploit, Nexpose, Nessus, Nmap, Burp Suite etc.
• Minimum of 3 years’ working experience in Information Systems Security – e.g. Ethical Hacking,
• Penetration Testing, Vulnerability Assessments, ICT Audits, Pre-and-Post Implementation System Reviews etc.
• Minimum of 3 years’ working experience in Networking and Operating Systems e.g. Cisco, Huawei, Windows (All), Unix, Linux etc.
• Minimum of 3 years’ working experience in Web and Mobile applications technologies e.g. Java, Python, PHP, Javascript, CSS, Apache, Nginx, IIS etc.
• Working knowledge of databases e.g. Oracle, MSSQL, MongoDB, Postgres etc. will be an added advantage
• Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc. will be an added advantage
• Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, GitHub, Gitlab etc. will be an added advantage
• Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD etc. will be an added advantage
• Experience operating within squads/tribes, driving security automation adoption across engineering, operations, cloud, and digital product teams.
• Excellent communication skills and a good team player
• Excellent time management skills i.e. getting things done in a timely manner
• Excellent report writing and presentation skills
• Very analytical and keen on details
• Customer obsessed
How to Apply. If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to create/ update your candidate profile on the recruitment portal, fill in all your work experiences and certifications then Click on the apply button. Remember to attach your resume.
Responsibilities
Security Assurance for Projects
• Conduct periodic security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure
• Ensure all new and existing systems/products/services comply with Company's security policies & standards and other industry best practices e.g. ISO27001, CIS and Kenya Data Protection Act
• Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
• Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
• Define Cyber Security metrics and report periodically on security compliance across all networks/systems
Bug Bounty Program Management
• Drive the remediation of the identified/reported bug bounty findings and integrate the learnings to different areas of application.
Red Teaming & Offensive Security
• Carry out red team exercises, providing input to scope, reviewing findings, and tracking remediation progress. Deliver insights on risks, while fostering purple team collaboration and continuous upskilling in offensive security.
DevSecOps Strategy & Tooling Governance
• Ensure CI/CD pipelines integrate required security tools and practices. Carry out developer security training to embed secure coding practices.
Knowledge share
• Conduct knowledge share sessions on new areas of technology, bug bounty learning, read teaming findings within the squads and larger organization.
Research & Development
• Conduct research and development on emerging areas in security.
• Present findings for sensitization and knowledge transfer to other team members and staff.
Health & Safety
• Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work
• All employees have a responsibility to adhere to safety, health, and wellbeing policies.
Qualifications
• Degree in Information Security/Computer Forensics/Computer Science/Information Technology or other relevant Technical Degree
• Information security certifications e.g. CEH/CISSP/CISM/CISA/GIAC/CPTP/OSCP
• Networking certifications: CCNA/CCNP/CCSP are also preferred
• Certifications in Microsoft Windows and Linux/Unix Operating Systems
• Demonstrate competency in the use and administration of ethical hacking tools e.g. KALI Linux, Metasploit, Nexpose, Nessus, Nmap, Burp Suite etc.
• Minimum of 3 years’ working experience in Information Systems Security – e.g. Ethical Hacking,
• Penetration Testing, Vulnerability Assessments, ICT Audits, Pre-and-Post Implementation System Reviews etc.
• Minimum of 3 years’ working experience in Networking and Operating Systems e.g. Cisco, Huawei, Windows (All), Unix, Linux etc.
• Minimum of 3 years’ working experience in Web and Mobile applications technologies e.g. Java, Python, PHP, Javascript, CSS, Apache, Nginx, IIS etc.
• Working knowledge of databases e.g. Oracle, MSSQL, MongoDB, Postgres etc. will be an added advantage
• Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc. will be an added advantage
• Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, GitHub, Gitlab etc. will be an added advantage
• Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD etc. will be an added advantage
• Experience operating within squads/tribes, driving security automation adoption across engineering, operations, cloud, and digital product teams.
• Excellent communication skills and a good team player
• Excellent time management skills i.e. getting things done in a timely manner
• Excellent report writing and presentation skills
• Very analytical and keen on details
• Customer obsessed
How to Apply. If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to create/ update your candidate profile on the recruitment portal, fill in all your work experiences and certifications then Click on the apply button. Remember to attach your resume.