715 Security Operations jobs in Kenya
Security Operations Center (SOC) Analyst
50100 Kakamega, Western
KES105000 Annually
WhatJobs
Posted 3 days ago
Job Viewed
Job Description
Our client, a rapidly expanding technology company, is seeking a vigilant and analytical Security Operations Center (SOC) Analyst to join their entirely remote cybersecurity team. This role is essential for monitoring, detecting, and responding to cyber threats against our organization's information systems. You will be tasked with analyzing security alerts from various monitoring tools, investigating potential security incidents, and escalating issues as necessary. Responsibilities include performing real-time analysis of security events, identifying malicious activity, and supporting the incident response process. The ideal candidate will have a solid understanding of cybersecurity principles, network protocols, and common attack vectors. Experience with SIEM (Security Information and Event Management) platforms, endpoint detection and response (EDR) solutions, and threat intelligence feeds is highly valued. As a remote team member, you will actively participate in shift rotations and collaborate with colleagues across different time zones using advanced communication and incident management tools. We are looking for a proactive individual with excellent problem-solving skills, the ability to work under pressure, and a strong desire to learn and adapt to the ever-changing threat landscape. A foundational knowledge of operating systems (Windows, Linux) and scripting languages is a plus. This is a fantastic opportunity for a budding cybersecurity professional to gain invaluable experience and contribute to the protection of critical digital assets in a fully remote capacity.
This advertiser has chosen not to accept applicants from your region.
0
Senior Security Operations Center (SOC) Analyst
20100 Mwembe
KES600000 Annually
WhatJobs
Posted 4 days ago
Job Viewed
Job Description
Our client, a prominent financial institution, is seeking a highly skilled Senior Security Operations Center (SOC) Analyst to join their advanced cybersecurity team. This role is fully remote, allowing top talent to contribute from anywhere.
As a Senior SOC Analyst, you will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents across the organization's network and systems. You will play a crucial role in safeguarding sensitive data and ensuring the integrity and availability of our IT infrastructure. This position requires a deep understanding of threat landscapes, security tools, and incident response procedures.
Key Responsibilities:
Qualifications:
As a Senior SOC Analyst, you will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents across the organization's network and systems. You will play a crucial role in safeguarding sensitive data and ensuring the integrity and availability of our IT infrastructure. This position requires a deep understanding of threat landscapes, security tools, and incident response procedures.
Key Responsibilities:
- Monitor security alerts and events from various sources, including SIEM, IDS/IPS, firewalls, and endpoint detection systems.
- Perform in-depth analysis of security incidents, including log analysis, malware analysis, and forensic investigations.
- Develop and refine threat detection rules, correlation logic, and alerting mechanisms.
- Lead and coordinate incident response activities, including containment, eradication, and recovery efforts.
- Conduct vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
- Stay current with emerging threats, vulnerabilities, and attack vectors relevant to the financial sector.
- Develop and maintain comprehensive documentation, including incident response plans, playbooks, and SOPs.
- Provide technical guidance and mentorship to junior SOC analysts.
- Collaborate with IT, engineering, and business units to implement security best practices.
- Participate in security awareness training and contribute to a security-conscious culture.
- Conduct threat hunting exercises to proactively identify potential threats.
- Evaluate and recommend new security technologies and tools.
Qualifications:
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Minimum of 5 years of experience in a SOC analyst or similar cybersecurity role.
- Proven experience with Security Information and Event Management (SIEM) tools (e.g., Splunk, QRadar, ArcSight).
- Strong understanding of networking protocols, operating systems (Windows, Linux), and common attack vectors.
- Hands-on experience with Intrusion Detection/Prevention Systems (IDS/IPS), firewalls, and endpoint security solutions.
- Knowledge of incident response methodologies and frameworks (e.g., NIST, SANS).
- Relevant certifications such as CISSP, CEH, GIAC, or Security+ are highly desirable.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong communication skills, both written and verbal, for clear reporting and collaboration in a remote setting.
- Ability to work independently and as part of a distributed team.
This advertiser has chosen not to accept applicants from your region.
1
Senior Security Operations Engineer
50100 Mumbuni
KES270000 Annually
WhatJobs
Posted 2 days ago
Job Viewed
Job Description
Our client, a leading provider of cloud-based security solutions, is looking for a highly skilled Senior Security Operations Engineer to bolster their security infrastructure. This role offers a hybrid work model, combining the flexibility of remote work with essential on-site collaboration. You will be responsible for the design, implementation, and maintenance of our security operations center (SOC) tools and platforms, ensuring robust threat detection and response capabilities.
Key Responsibilities:
Qualifications:
Join our client and play a pivotal role in safeguarding their digital landscape through advanced security engineering, with the flexibility of a hybrid work arrangement.
Key Responsibilities:
- Design, deploy, and manage security tools and technologies, including SIEM, EDR, IDS/IPS, SOAR, and threat intelligence platforms.
- Develop and automate security workflows and incident response playbooks to enhance efficiency and effectiveness.
- Monitor the health and performance of security infrastructure, ensuring optimal operation and availability.
- Analyze security data to identify patterns, anomalies, and potential threats, and develop detection rules accordingly.
- Collaborate with incident response teams to provide technical expertise during security investigations.
- Conduct threat hunting exercises to proactively identify sophisticated threats that may evade automated detection.
- Evaluate and recommend new security technologies and solutions to address emerging threats.
- Ensure that security systems are configured and maintained in accordance with best practices and organizational policies.
- Develop and maintain comprehensive documentation for security systems and processes.
- Mentor junior engineers and analysts, providing guidance on security operations and tool management.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 7 years of experience in security operations, engineering, or a related cybersecurity role.
- Proven expertise in managing and optimizing SIEM solutions (e.g., Splunk, QRadar, LogRhythm) and EDR platforms.
- Strong understanding of network protocols, operating systems (Windows, Linux), and cloud environments (AWS, Azure, GCP).
- Proficiency in scripting languages (e.g., Python, PowerShell) for automation and tool integration.
- Experience with incident response methodologies and security frameworks.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong communication and interpersonal skills, with the ability to work effectively in a team environment.
- Relevant certifications such as CISSP, GIAC, CCSP are highly desirable.
- Ability to balance remote work with periodic on-site meetings and collaboration.
Join our client and play a pivotal role in safeguarding their digital landscape through advanced security engineering, with the flexibility of a hybrid work arrangement.
This advertiser has chosen not to accept applicants from your region.
2
Information Security Operations Manager
20100 Naivasha, Rift Valley
KES160000 month
WhatJobs
Posted 3 days ago
Job Viewed
Job Description
We are recruiting a highly experienced and strategic Information Security Operations Manager to lead our security operations center (SOC) in a fully remote capacity. This critical role involves overseeing the day-to-day security operations, ensuring the protection of our organization's information assets against cyber threats. You will be responsible for managing the incident response lifecycle, conducting threat analysis, and implementing security monitoring and detection systems. Key responsibilities include developing and refining security policies and procedures, managing security tools and technologies (e.g., SIEM, IDS/IPS, EDR), and coordinating with incident response teams during security breaches. You will also be involved in vulnerability management, security awareness training, and ensuring compliance with relevant security standards and regulations. The ideal candidate will have a proven track record in security operations management, strong leadership abilities, and deep technical knowledge of cybersecurity principles and practices. Excellent analytical and problem-solving skills are essential, as is the ability to make sound decisions under pressure. You must be adept at communicating complex security issues to technical and non-technical stakeholders. This position requires exceptional self-discipline, organizational skills, and the ability to thrive in a remote work environment. You will lead and mentor a team of security analysts, fostering a culture of continuous improvement and operational excellence. Relevant security certifications (e.g., CISSP, CISM, GIAC) are highly valued. Join our dedicated team and play a vital role in safeguarding our digital infrastructure.
This advertiser has chosen not to accept applicants from your region.
3
Senior Security Analyst - Threat Intelligence
00200 Gathiruini
KES720000 Annually
WhatJobs
Posted 3 days ago
Job Viewed
Job Description
Our client is looking for a highly skilled Senior Security Analyst specializing in Threat Intelligence to join our fully remote security operations center. This position offers the flexibility to work from anywhere in Kenya. You will be at the forefront of identifying, analyzing, and responding to cyber threats targeting our organization and client base. Your primary focus will be on gathering and interpreting threat intelligence, developing proactive defense strategies, and informing incident response efforts. Key responsibilities include monitoring threat landscapes, analyzing malware and attack vectors, and creating detailed reports on emerging threats and vulnerabilities. You will also collaborate with incident response teams, provide subject matter expertise, and contribute to the continuous improvement of our security posture. The ideal candidate holds a Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field, with at least 7 years of experience in information security, specifically in threat intelligence or analysis. Certifications such as CISSP, GIAC, or relevant threat intelligence certifications are highly desirable. Proven experience with SIEM tools, EDR solutions, and threat intelligence platforms is mandatory. Strong analytical skills, excellent written and verbal communication, and the ability to work effectively in a fast-paced, remote environment are essential. You should be passionate about cybersecurity and possess a deep understanding of adversary tactics, techniques, and procedures (TTPs). This role provides an exceptional opportunity to contribute to the security of a leading organization from a remote setting.
This advertiser has chosen not to accept applicants from your region.
4
Information Security Analyst - Threat Intelligence
80100 Nairobi, Nairobi
KES400000 Annually
WhatJobs
Posted 6 days ago
Job Viewed
Job Description
Our client is looking for a diligent and proactive Information Security Analyst with a specialization in Threat Intelligence to bolster our cybersecurity defenses at our headquarters in Mombasa, Mombasa, KE . This role is crucial for identifying, analyzing, and mitigating potential cyber threats targeting our organization's information assets. You will be responsible for monitoring security alerts, investigating suspicious activities, performing vulnerability assessments, and developing and implementing security policies and procedures. Key duties include researching emerging threats, analyzing threat actor tactics, techniques, and procedures (TTPs), and contributing to incident response planning and execution. You will also be involved in security awareness training and the continuous improvement of our security posture. The ideal candidate will possess a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, with at least 3 years of experience in information security or cybersecurity operations. Hands-on experience with SIEM tools, intrusion detection/prevention systems (IDPS), and endpoint security solutions is required. Knowledge of threat intelligence platforms and methodologies is highly desirable. Strong analytical, problem-solving, and communication skills are essential. Certifications such as CompTIA Security+, CEH, or CISSP are a plus. This position requires a dedicated individual who can work effectively within our security operations center.
This advertiser has chosen not to accept applicants from your region.
5
Cybersecurity Threat Intelligence Analyst
80100 Nairobi, Nairobi
KES195000 Annually
WhatJobs
Posted today
Job Viewed
Job Description
Our client is seeking a vigilant and analytical Cybersecurity Threat Intelligence Analyst to join their elite security operations center. This is a fully remote position, allowing you to contribute to global cybersecurity efforts from any location. You will be responsible for researching, analyzing, and disseminating actionable threat intelligence to protect the organization’s critical assets. This involves monitoring various sources, identifying emerging threats, understanding attacker tactics, techniques, and procedures (TTPs), and providing timely alerts and recommendations to security teams. Your expertise will be crucial in proactively identifying and mitigating cyber risks before they impact the business. This role requires a sharp mind, a deep understanding of the threat landscape, and the ability to translate complex technical data into clear, actionable insights. You will be at the forefront of defending against sophisticated cyber adversaries.
Key Responsibilities:
The ideal candidate will possess a Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. A minimum of 3 years of experience in cybersecurity, with a focus on threat intelligence, security operations, or incident response, is required. Demonstrable experience with threat intelligence platforms, SIEM tools, and analysis techniques is essential. Strong knowledge of malware analysis, network protocols, and attacker TTPs is a must. Excellent research, analytical, and communication skills are paramount. Certifications such as GIAC Certified Cyber Threat Professional (GCTP), EC-Council Certified Threat Intelligence Analyst (CTIA), or equivalent are highly desirable. The ability to work independently and as part of a remote global team is critical.
Key Responsibilities:
- Collect, analyze, and interpret threat intelligence data from diverse sources (OSINT, commercial feeds, internal telemetry).
- Identify and track advanced persistent threats (APTs), malware, and other cyber adversaries.
- Develop and maintain threat intelligence reports, summaries, and briefings for various audiences.
- Map observed threats to the MITRE ATT&CK framework and other relevant models.
- Provide proactive recommendations for threat mitigation and security control improvements.
- Support incident response efforts by providing timely and relevant threat context.
- Develop and refine threat hunting hypotheses based on intelligence.
- Automate intelligence collection and analysis processes where possible.
- Collaborate with internal security teams (SOC, IR, vulnerability management) to enhance defensive capabilities.
- Stay informed about geopolitical events and their potential impact on the threat landscape.
- Contribute to the development and improvement of threat intelligence platforms and tools.
The ideal candidate will possess a Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. A minimum of 3 years of experience in cybersecurity, with a focus on threat intelligence, security operations, or incident response, is required. Demonstrable experience with threat intelligence platforms, SIEM tools, and analysis techniques is essential. Strong knowledge of malware analysis, network protocols, and attacker TTPs is a must. Excellent research, analytical, and communication skills are paramount. Certifications such as GIAC Certified Cyber Threat Professional (GCTP), EC-Council Certified Threat Intelligence Analyst (CTIA), or equivalent are highly desirable. The ability to work independently and as part of a remote global team is critical.
This advertiser has chosen not to accept applicants from your region.
Be The First To Know
About the latest Security operations Jobs in Kenya !
6
Cybersecurity Threat Intelligence Analyst
40101 Kisumu
KES220000 Annually
WhatJobs
Posted 3 days ago
Job Viewed
Job Description
Our client is seeking a sharp and vigilant Cybersecurity Threat Intelligence Analyst to join our fully remote security operations team. In this crucial role, you will be responsible for gathering, analyzing, and disseminating threat intelligence to proactively protect our organization's digital assets and infrastructure. You will monitor various sources, including open-source intelligence (OSINT), dark web forums, and internal security logs, to identify emerging threats, vulnerabilities, and attack vectors. Your primary duties will include researching and tracking threat actors, developing threat profiles, and assessing the potential impact of cyber threats on the organization. You will also create and deliver detailed threat intelligence reports, briefings, and advisories to relevant stakeholders, including security operations centers (SOCs) and incident response teams. The ideal candidate will possess a strong understanding of cybersecurity principles, threat landscapes, and common attack methodologies. Proficiency in using threat intelligence platforms, SIEM tools, and data analysis techniques is essential. Excellent analytical and critical thinking skills are required to interpret complex data and derive actionable insights. You must have the ability to communicate technical information clearly and concisely to both technical and non-technical audiences. This is a challenging and rewarding opportunity to work at the forefront of cybersecurity, contributing to the protection of our organization in a dynamic and evolving threat environment, all while working remotely. Experience in malware analysis, reverse engineering, or digital forensics is a plus.
This advertiser has chosen not to accept applicants from your region.
7
Senior Threat Intelligence Analyst
30100 Kitale, Rift Valley
KES280000 Annually
WhatJobs
Posted 4 days ago
Job Viewed
Job Description
Our client, a globally recognized leader in cybersecurity, is seeking a highly experienced Senior Threat Intelligence Analyst to join their elite, fully remote threat intelligence team. This critical role is responsible for identifying, analyzing, and disseminating actionable threat intelligence to protect our client's organization and its customers from advanced cyber threats. The Senior Threat Intelligence Analyst will monitor the threat landscape, research emerging threats, attacker tactics, techniques, and procedures (TTPs), and develop proactive defensive strategies. You will be instrumental in creating intelligence reports, conducting deep-dive investigations into threat actors, and providing strategic recommendations to enhance security posture. This position requires a profound understanding of cybersecurity frameworks, malware analysis, network security, and open-source intelligence (OSINT) techniques. The ideal candidate will possess exceptional analytical, research, and communication skills, with a demonstrated ability to operate effectively in a fast-paced, remote-first environment. You will collaborate closely with security operations, incident response, and other security teams to ensure intelligence is integrated into defensive operations. Your expertise will be crucial in anticipating and mitigating cyber risks, safeguarding critical assets, and contributing to a secure digital ecosystem. This is an exceptional opportunity to leverage your advanced threat intelligence skills to make a significant impact from anywhere, playing a vital role in the global fight against cybercrime.
Responsibilities:
Qualifications:
Responsibilities:
- Monitor, analyze, and report on global cyber threats and trends.
- Identify and track threat actors, their motivations, and their TTPs.
- Conduct in-depth research on emerging malware, vulnerabilities, and attack vectors.
- Develop and disseminate actionable threat intelligence reports and alerts.
- Collaborate with security operations and incident response teams to operationalize intelligence.
- Utilize various intelligence sources and tools, including OSINT and commercial feeds.
- Provide strategic recommendations for improving the organization's security posture.
- Contribute to the development of threat hunting methodologies.
- Present intelligence findings to technical and non-technical audiences.
- Stay abreast of the latest advancements in cybersecurity and threat intelligence.
Qualifications:
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Minimum of 5 years of experience in threat intelligence, cybersecurity analysis, or incident response.
- Deep understanding of threat actor TTPs, malware analysis, and network security.
- Proficiency with threat intelligence platforms and analytical tools.
- Strong experience with OSINT techniques and data correlation.
- Excellent research, analytical, and critical-thinking skills.
- Strong written and verbal communication skills for report writing and presentations.
- Ability to work independently and manage time effectively in a remote setting.
- Relevant certifications such as GIAC Certified Threat Intelligence (GCTI) or similar are highly desirable.
- Experience in threat hunting is a plus.
This advertiser has chosen not to accept applicants from your region.
8
Cyber Threat Intelligence Analyst
20100 Naivasha, Rift Valley
KES250000 Annually
WhatJobs
Posted 4 days ago
Job Viewed
Job Description
Our client is seeking a sharp and analytical Cyber Threat Intelligence Analyst to bolster their information security team. This is a fully remote position, enabling you to work from any location and contribute to global threat defense. You will be responsible for collecting, analyzing, and disseminating threat intelligence from various sources to identify and track cyber adversaries, their tactics, techniques, and procedures (TTPs). Your insights will be critical in proactively identifying vulnerabilities and recommending mitigation strategies to protect the organization's digital assets.
Key responsibilities include monitoring open-source intelligence (OSINT), dark web forums, and commercial threat feeds for relevant information. You will develop and maintain threat actor profiles, mapping their activities to specific campaigns and industries. This role involves correlating and analyzing security alerts, logs, and other data to detect sophisticated threats and advanced persistent threats (APTs). You will produce regular threat landscape reports, briefings, and actionable intelligence for security operations centers (SOCs) and relevant stakeholders. The ideal candidate will have a strong understanding of cyber threat actors, attack vectors, and defensive security measures. Proficiency in using threat intelligence platforms, SIEM tools, and data analysis techniques is essential. Experience with reverse engineering malware or digital forensics is a plus. Excellent written and verbal communication skills are required to effectively convey complex technical information. You will work collaboratively with incident response, security operations, and engineering teams to operationalize threat intelligence. This is an opportunity to make a significant contribution to cybersecurity in a dynamic, remote work environment, staying at the forefront of the evolving threat landscape.
Key responsibilities include monitoring open-source intelligence (OSINT), dark web forums, and commercial threat feeds for relevant information. You will develop and maintain threat actor profiles, mapping their activities to specific campaigns and industries. This role involves correlating and analyzing security alerts, logs, and other data to detect sophisticated threats and advanced persistent threats (APTs). You will produce regular threat landscape reports, briefings, and actionable intelligence for security operations centers (SOCs) and relevant stakeholders. The ideal candidate will have a strong understanding of cyber threat actors, attack vectors, and defensive security measures. Proficiency in using threat intelligence platforms, SIEM tools, and data analysis techniques is essential. Experience with reverse engineering malware or digital forensics is a plus. Excellent written and verbal communication skills are required to effectively convey complex technical information. You will work collaboratively with incident response, security operations, and engineering teams to operationalize threat intelligence. This is an opportunity to make a significant contribution to cybersecurity in a dynamic, remote work environment, staying at the forefront of the evolving threat landscape.
This advertiser has chosen not to accept applicants from your region.
9