Background

As one of the largest insurers and financial services companies in East Africa, we have decades of experience in helping discerning individuals protect and create their wealth. But that’s not all. We also keep an eye firmly on the future, using innovation to craft financial products and services that we know you need in today’s constantly changing world....

Job Summary

We are seeking a driven and skilled Cybersecurity Analyst to join our team. The ideal candidate will possess strong technical expertise in cybersecurity principles and a passion for integrating security throughout the software development lifecycle (DevSecOps). In this role, you’ll actively contribute to protecting our systems, networks, and sensitive data by proactively identifying vulnerabilities, implementing robust security measures, and responding effectively to security incidents.

Key Responsibilities:

• Implement, test and operate security software, tools and techniques in compliance with technical reference architecture
• Perform on-going security testing and code review to uncover vulnerabilities
• Fix detected vulnerabilities to maintain a high-security standards
• Provide secure engineering designs for new software solutions to help mitigate security vulnerabilities
• Contribute to all levels of the architecture of proposed and existing software
• Maintain technical documentation of application security, assessments and remediation
• Consult team members and peers on secure coding practices
• Document security breaches and assess the impact
• Develop company-wide best practices for IT security
• Investigate security breaches and other cybersecurity incidents
• Work with the security team to perform tests and uncover network vulnerabilities
• Perform penetration testing on applications
• Help colleagues install security software and understand information security management
• Research security enhancements and make recommendations to management
• Stay current on IT security trends and news
• Stay up-to-date on information technology trends and security standards

Qualifications

• At Least 2-3 years work experience as a software security engineer
• Detailed technical knowledge of techniques, standards and state-of-the art capabilities for authentication and authorization, applied cryptography, security vulnerabilities and remediation.
• Software development experience in one of the following core languages: PHP,Python, Java, Javascript and DotNET(C-sharp etc).
• Adequate knowledge of web related technologies (Web applications, Web Services and Service Oriented Architectures) and of network/web related protocols.
• Interest in all aspects of security research and development.
• Diploma or Degree in Computer Science or related field and relevant certifications.

• Implement, test and operate security software, tools and techniques in compliance with technical reference architecture
• Perform on-going security testing and code review to uncover vulnerabilities
• Fix detected vulnerabilities to maintain a high-security standards
• Provide secure engineering designs for new software solutions to help mitigate security vulnerabilities
• Contribute to all levels of the architecture of proposed and existing software
• Maintain technical documentation of application security, assessments and remediation
• Consult team members and peers on secure coding practices
• Document security breaches and assess the impact
• Develop company-wide best practices for IT security
• Investigate security breaches and other cybersecurity incidents
• Work with the security team to perform tests and uncover network vulnerabilities
• Perform penetration testing on applications
• Help colleagues install security software and understand information security management
• Research security enhancements and make recommendations to management
• Stay current on IT security trends and news
• Stay up-to-date on information technology trends and security standards

• Cybersecurity principles
• DevSecOps
• Vulnerability identification and remediation
• Secure engineering designs
• Secure coding practices
• Penetration testing
• Information security management
• IT security trends
• Security standards
• Authentication and authorization techniques
• Applied cryptography
• PHP, Python, Java, Javascript, DotNET (C-sharp etc.)
• Web applications, Web Services, Service Oriented Architectures
• Network/web related protocols

• At Least 2-3 years work experience as a software security engineer
• Detailed technical knowledge of techniques, standards and state-of-the art capabilities for authentication and authorization, applied cryptography, security vulnerabilities and remediation.
• Software development experience in one of the following core languages: PHP,Python, Java, Javascript and DotNET(C-sharp etc).
• Adequate knowledge of web related technologies (Web applications, Web Services and Service Oriented Architectures) and of network/web related protocols.
• Interest in all aspects of security research and development.
• Diploma or Degree in Computer Science or related field and relevant certifications.