What Senior Information Security Analyst Jobs are in Nairobi?

• Conduct comprehensive security risk assessments and vulnerability analyses across various systems and applications.
• Develop, implement, and maintain security policies, standards, and procedures to ensure compliance with industry best practices and regulatory requirements.
• Monitor network traffic and system logs for suspicious activities, intrusions, and security breaches, responding promptly to incidents.
• Lead incident response efforts, including investigation, containment, eradication, and recovery from security events.
• Design and deploy security solutions, including firewalls, intrusion detection/prevention systems, and endpoint security tools.
• Collaborate with IT and development teams to integrate security controls into the software development lifecycle and system architecture.
• Provide security awareness training and guidance to employees across the organization.
• Stay abreast of emerging security threats, vulnerabilities, and technologies, recommending and implementing proactive defense strategies.
• Manage security documentation and reporting, ensuring accuracy and completeness.

• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree or equivalent experience is preferred.
• Minimum of 5-7 years of progressive experience in information security, with a strong focus on risk management, incident response, and security operations.
• Proven expertise in security technologies such as SIEM, IDS/IPS, EDR, firewalls, and VPNs.
• In-depth knowledge of network protocols, operating systems (Windows, Linux), and cloud security principles (AWS, Azure, GCP).
• Experience with security frameworks like ISO 27001, NIST, and GDPR.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong communication and interpersonal skills, with the ability to explain complex security concepts to both technical and non-technical audiences.
• Relevant security certifications such as CISSP, CISM, or CEH are highly desirable.
• Demonstrated ability to work independently and collaboratively in a remote setting.

Our client, a rapidly growing cybersecurity firm, is seeking a highly motivated and experienced Senior Information Security Analyst to join their fully remote team. This is a unique opportunity to contribute to a company dedicated to safeguarding digital assets for businesses across various sectors. As a remote-first organization, we foster a culture of trust, autonomy, and collaboration, ensuring all team members feel connected and empowered, regardless of their physical location. You will play a pivotal role in developing, implementing, and maintaining robust security strategies to protect sensitive data and infrastructure. The ideal candidate thrives in a dynamic environment, possesses exceptional analytical skills, and is passionate about staying ahead of evolving cyber threats. This role offers the chance to work with cutting-edge security technologies and make a tangible impact on our client's security posture. If you are a proactive security professional looking for a challenging and rewarding remote career opportunity, we encourage you to apply.

• Develop and implement comprehensive information security policies, procedures, and guidelines.
• Conduct regular risk assessments and vulnerability analyses to identify and mitigate potential security threats.
• Monitor security alerts and events, investigating and responding to incidents in a timely and effective manner.
• Manage and maintain security technologies, including firewalls, intrusion detection/prevention systems, and endpoint security solutions.
• Collaborate with IT and development teams to ensure security is integrated into the system development lifecycle.
• Provide security awareness training and guidance to employees across the organization.
• Stay abreast of the latest security threats, vulnerabilities, and industry best practices.
• Participate in incident response planning and execution, including forensic analysis when necessary.
• Develop and manage security metrics and reporting for senior management.
• Ensure compliance with relevant regulatory and legal requirements.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in information security, with a focus on security analysis and incident response.
• Proven experience with security technologies such as SIEM, firewalls, IDS/IPS, EDR, and vulnerability scanners.
• Strong understanding of security frameworks (e.g., NIST, ISO 27001) and risk management principles.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Relevant security certifications such as CISSP, CISM, or CompTIA Security+ are highly desirable.
• Exceptional communication and interpersonal skills, with the ability to explain complex security concepts to non-technical audiences.
• Demonstrated ability to work independently and as part of a remote team.
• A proactive approach to identifying and addressing security challenges.

Our client offers a competitive compensation package and a comprehensive benefits program designed to support our remote workforce. This includes a generous annual salary, fully paid health, dental, and vision insurance, a 401(k) retirement plan with company match, and generous paid time off. We also provide a stipend for home office setup and ongoing professional development opportunities, including access to training courses and certifications. Employees benefit from flexible working hours and the autonomy to manage their schedules effectively. Regular virtual team-building activities and a supportive management structure ensure a positive and engaging remote work experience. This role is ideal for individuals seeking to advance their career in information security within a forward-thinking, remote-first environment.

Our client is seeking a proactive and experienced Senior Security Architect to join their dynamic security team. This is a fully remote position, allowing you to work from anywhere. You will be responsible for designing, implementing, and maintaining robust security architectures and strategies to protect the company's assets, data, and systems from evolving threats. The ideal candidate possesses a deep understanding of cybersecurity principles, threat modeling, risk assessment, and secure design patterns. You will collaborate with various teams to embed security into the entire development lifecycle and ensure compliance with industry regulations. Join us in building a secure digital future from a **remote-first** perspective.

• Design and implement secure architectures for cloud, on-premises, and hybrid environments.
• Develop and maintain security policies, standards, and guidelines.
• Conduct threat modeling and risk assessments for new and existing systems and applications.
• Evaluate and recommend security technologies and solutions.
• Define security requirements and ensure their implementation across projects.
• Collaborate with development, operations, and infrastructure teams to integrate security best practices.
• Develop incident response strategies and contribute to security incident management.
• Perform security reviews of designs, code, and configurations.
• Stay current with the latest security threats, vulnerabilities, and trends.
• Provide security expertise and guidance to internal teams.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 5+ years of experience in information security, with a focus on security architecture.
• Strong understanding of security principles, frameworks (e.g., NIST, ISO 27001), and best practices.
• Experience with cloud security (AWS, Azure, GCP) and network security.
• Knowledge of secure coding practices and application security.
• Familiarity with identity and access management (IAM) solutions.
• Experience with security tools such as firewalls, IDS/IPS, SIEM, and vulnerability scanners.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, essential for a **remote-first** role.
• Relevant security certifications (e.g., CISSP, CISM, CCSP) are a plus.

• Competitive salary and attractive benefits package.
• Opportunity to work on challenging security initiatives.
• Fully remote work arrangement offering maximum flexibility.
• Support for professional development and certifications.
• Be a key player in safeguarding the company's digital assets.
• Work within a collaborative and security-focused team culture.

• Monitor security systems (SIEM, IDS/IPS, EDR) for threats and anomalies, conducting thorough investigations.
• Lead and coordinate incident response efforts, including containment, eradication, and recovery phases.
• Perform vulnerability assessments and penetration testing, analyzing results and recommending remediation actions.
• Develop and refine threat hunting methodologies to proactively identify sophisticated threats.
• Analyze malware and security logs to understand attack vectors and TTPs.
• Create detailed incident reports and post-mortem analyses.
• Contribute to the development and maintenance of security policies, procedures, and documentation.
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and defense techniques.
• Collaborate with engineering and IT teams to implement security enhancements.
• Mentor junior analysts and share knowledge within the security team.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; relevant certifications (e.g., GCIA, GCIH, CISSP) are highly desirable.
• Minimum of 6 years of experience in cybersecurity analysis, incident response, or threat intelligence.
• Proven experience with SIEM platforms (e.g., Splunk, QRadar), EDR solutions, and network traffic analysis tools.
• Strong understanding of threat landscapes, attack methodologies, and mitigation strategies.
• Proficiency in scripting languages (e.g., Python) for automation and data analysis.
• Experience with vulnerability management tools and processes.
• Excellent analytical, problem-solving, and critical thinking skills.
• Superior written and verbal communication skills, with the ability to document findings and communicate effectively with various stakeholders.
• Ability to work independently and collaboratively in a remote setting.
• Demonstrated experience in leading security investigations.

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, and EDR platforms.
• Analyze potential security threats and incidents, performing initial triage and investigation.
• Respond to security incidents according to established playbooks and escalation procedures.
• Conduct vulnerability assessments and support penetration testing activities.
• Assist in the development and maintenance of security policies and procedures.
• Contribute to security awareness training materials and initiatives.
• Maintain documentation of security controls, incident logs, and system configurations.
• Stay informed about current cybersecurity threats, vulnerabilities, and best practices.
• Communicate effectively with clients and internal teams regarding security matters.
• Utilize a variety of security tools and technologies to perform daily tasks.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a closely related field.
• Minimum of 3 years of experience in information security, cybersecurity operations, or a similar role.
• Proven experience with SIEM, IDS/IPS, EDR, vulnerability scanners, and other security tools.
• Solid understanding of networking concepts, operating systems, and common security threats.
• Excellent analytical and problem-solving skills, with meticulous attention to detail.
• Strong written and verbal communication skills, essential for remote collaboration.
• Ability to work independently, manage time effectively, and meet deadlines in a remote setting.
• Relevant certifications such as Security+, CySA+, or CEH are a strong plus.
• Experience working in a remote or distributed team environment is highly desirable.

• Competitive remote salary package.
• Comprehensive health, dental, and vision insurance.
• Generous work-from-home stipend for office setup and connectivity.
• Flexible working hours and remote work flexibility.
• Opportunities for professional development, online training, and certifications.
• Collaborative virtual team environment with regular online team-building activities.
• Access to a wide array of cutting-edge remote security tools.

• Conduct comprehensive cybersecurity risk assessments and gap analyses for clients.
• Develop and present strategic cybersecurity roadmaps and implementation plans.
• Advise clients on security architecture, governance, and compliance best practices.
• Lead projects related to security policy development, incident response planning, and threat management.
• Perform technical security reviews and provide recommendations for improvement.
• Assist clients in achieving and maintaining compliance with relevant industry standards (e.g., ISO 27001, NIST, SOC 2).
• Stay current with the latest cybersecurity threats, vulnerabilities, and mitigation strategies.
• Collaborate with clients' internal teams to implement and operationalize security controls.
• Develop and deliver client presentations and training sessions.
• Contribute to the firm's knowledge base and thought leadership in cybersecurity.

• Master's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• 8+ years of experience in cybersecurity, with a significant portion in consulting or advisory roles.
• Demonstrated expertise in multiple security domains, including risk management, GRC, network security, and cloud security.
• Strong understanding of major security frameworks and compliance regulations.
• Excellent analytical, problem-solving, and strategic thinking skills.
• Exceptional written and verbal communication skills, with the ability to engage effectively with C-level executives.
• Proven ability to manage projects independently and deliver high-quality client services.
• Relevant certifications such as CISSP, CISM, CISA, or OSCP are highly preferred.
• Experience with various industry sectors is advantageous.
• Comfortable working independently and managing time effectively in a remote setting.

• Designing and implementing comprehensive security strategies and architectures for cloud environments (AWS, Azure, GCP).
• Developing and enforcing cloud security policies, standards, and best practices.
• Conducting security reviews and risk assessments of cloud solutions and services.
• Implementing and managing cloud security tools, including WAFs, security groups, IAM, and encryption services.
• Leading incident response efforts for cloud-based security events.
• Collaborating with DevOps and engineering teams to embed security into CI/CD pipelines and infrastructure as code.
• Staying current with emerging cloud security threats, vulnerabilities, and technologies.
• Providing technical guidance and mentorship to security and engineering teams.
• Ensuring compliance with relevant regulatory requirements in cloud deployments.

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical field.
• Minimum of 8 years of experience in cybersecurity, with at least 5 years focused on cloud security architecture.
• Proven expertise in securing major cloud platforms (AWS, Azure, GCP).
• In-depth knowledge of cloud security best practices, identity and access management (IAM), data encryption, and network security.
• Experience with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation.
• Familiarity with security compliance frameworks (e.g., ISO 27001, SOC 2, GDPR).
• Excellent communication, leadership, and strategic planning skills.
• Relevant certifications like CISSP, CCSP, AWS Certified Security - Specialty, or Azure Security Engineer Associate are highly desirable.
• Experience with container security (e.g., Docker, Kubernetes) is a plus.

Our client, a fast-growing cybersecurity solutions provider, is seeking a highly experienced and dedicated Senior Security Architect to join their elite, fully remote team. This role is critical for designing, implementing, and maintaining the overall security architecture of the organization's systems and products. You will be responsible for developing and enforcing security policies, identifying vulnerabilities, and implementing robust security controls to protect sensitive data and infrastructure from evolving threats. The ideal candidate is a proactive and strategic thinker with deep expertise in cybersecurity principles and technologies. This is an exceptional opportunity to shape the security posture of a leading tech company within a collaborative, remote-first environment, ensuring the safety and integrity of systems for clients across Kenya and globally.

• Design, develop, and implement comprehensive security architectures and solutions.
• Establish and maintain security policies, standards, and procedures across the organization.
• Conduct security risk assessments, vulnerability analyses, and penetration testing.
• Implement and manage security controls, including firewalls, intrusion detection/prevention systems, and SIEM solutions.
• Oversee the security aspects of cloud environments (AWS, Azure, GCP) and on-premises infrastructure.
• Collaborate with engineering and IT teams to ensure security is integrated throughout the software development lifecycle.
• Respond to security incidents, conduct investigations, and implement corrective actions.
• Stay current with emerging security threats, vulnerabilities, and technologies.
• Provide security guidance and mentorship to technical teams.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 8+ years of experience in information security, with a significant focus on security architecture and design.
• Proven experience in designing and implementing security solutions for complex IT environments, including cloud platforms.
• In-depth knowledge of security frameworks (e.g., NIST, ISO 27001) and best practices.
• Experience with various security technologies such as encryption, identity and access management (IAM), and endpoint security.
• Relevant certifications (e.g., CISSP, CISM, CCSP) are highly preferred.
• Strong analytical, problem-solving, and incident response skills.
• Excellent communication and interpersonal skills, with the ability to work effectively in a remote team.
• Experience with threat modeling and risk management methodologies.

This fully remote position offers a highly competitive salary, comprehensive health and wellness benefits, opportunities for continuous learning and professional certifications, generous paid time off, and a flexible work schedule. Join a company that values security and innovation, offering ample opportunities for career advancement. You'll have the chance to make a significant impact on security initiatives while enjoying the benefits of working from home anywhere in Kenya .

Our client, a premier cybersecurity consultancy, is actively seeking a highly skilled and experienced Senior Penetration Tester to join their fully remote team. In this critical role, you will be responsible for proactively identifying vulnerabilities in our clients' systems and networks through rigorous testing. You will simulate real-world attacks to uncover weaknesses and provide actionable recommendations for remediation. This is a remote-first position, offering flexibility and the ability to work from your dedicated home office. We are looking for a meticulous individual with a deep understanding of attack vectors, exploitation techniques, and defensive measures. Your expertise will be crucial in helping our clients strengthen their security posture and protect their valuable assets. You will be part of a collaborative team of ethical hackers, contributing to a culture of continuous learning and innovation. This is an exceptional opportunity to leverage your advanced offensive security skills in a challenging and rewarding environment. Join us and help make the digital world a safer place, remotely.

• Conduct comprehensive penetration tests and vulnerability assessments on web applications, network infrastructure, APIs, and mobile applications.
• Simulate sophisticated cyber-attacks to identify security flaws and weaknesses.
• Utilize a wide range of penetration testing tools and methodologies.
• Document findings clearly and concisely, providing detailed reports with actionable remediation recommendations.
• Present findings and technical details to both technical and non-technical audiences.
• Collaborate with clients to understand their security needs and provide expert advice.
• Stay updated with the latest hacking techniques, tools, and industry trends.
• Assist in the development of new penetration testing methodologies and services.
• Perform security code reviews and provide guidance on secure coding practices.
• Contribute to team knowledge sharing and mentoring of junior testers.

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in professional penetration testing.
• Proven experience in testing web applications, networks, cloud environments (AWS, Azure), and APIs.
• Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and exploitation techniques.
• Proficiency with penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, etc.
• Experience with scripting languages (e.g., Python, PowerShell, Bash) for tool development and automation.
• Strong knowledge of networking protocols, operating systems, and web technologies.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and manage time effectively in a remote setting.
• Relevant certifications such as OSCP, CEH, GPEN, or GWAPT are highly desirable.

Our client offers a competitive contract rate commensurate with experience and expertise. As a fully remote contractor, you will enjoy the flexibility to set your own hours and work from any location. We provide access to state-of-the-art testing tools and platforms. Our client is dedicated to professional growth and encourages participation in industry conferences and training. You will be part of a dynamic and supportive team of cybersecurity professionals, engaging in challenging and rewarding projects. This is an ideal opportunity for a seasoned penetration tester to apply their skills and expertise on a global scale, contributing to the security of diverse clients from wherever you are based, near Naivasha, Nakuru, KE or beyond.