Safaricom is hiring an Engineer – Managed Security Solutions to deploy enterprise cyber defense systems and manage client security operations infrastructure.

Reporting to the Manager – Enterprise IoT & Managed Security Deployment, the Engineer – Managed Security Solutions serves as a pivotal technical subject matter expert and strategic business champion for Safaricom’s Managed Security Solutions portfolio.

This role drives the technical, operational, commercial, and regulatory success of enterprise and government cybersecurity offerings. The role holder is responsible for end-to-end service delivery excellence, technical architecture, GRC framework alignment, partner ecosystems, and supporting revenue growth across enterprise security domains.

Responsibilities or duties

• Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work.
• All employees have a responsibility to adhere to safety, health, and wellbeing policies, guidelines and procedures in all actions and decisions.
• Provide strategic technical leadership for Safaricom’s Managed Security Services (MSS) portfolio, ensuring alignment with global cybersecurity standards, Zero Trust principles, and evolving threat landscapes.
• Lead the architecture, deployment, optimization, and continuous improvement of core security services, including SOC/MDR, NGFW, SASE, ZTNA, EDR/XDR, Cloud Security, and Vulnerability Management.
• Drive continuous service improvement (CSI) initiatives to strengthen customers’ security posture, operational resilience, and service performance.
• Oversee Cybersecurity Governance, Risk, and Compliance (GRC), ensuring adherence to frameworks such as ISO 27001, NIST CSF, PCI-DSS, GDPR, and applicable data protection regulations.
• Lead enterprise security risk assessments, audit readiness, compliance reporting, and the implementation of automated risk and third-party governance processes.
• Partner with Product, Sales, and Enterprise teams to develop customer-centric managed security solutions and provide technical leadership for strategic bids, RFPs, and enterprise engagements.
• Translate complex cybersecurity risks, technologies, and compliance requirements into clear business value for executive stakeholders and customers.
• Build and manage strategic relationships with cybersecurity vendors, cloud providers, and technology partners while overseeing vendor governance, SLAs, and technology roadmaps.
• Serve as a trusted cybersecurity advisor by leading executive security reviews, incident debriefs, threat intelligence sharing, and stakeholder engagement across enterprise customers.
• Ensure operational excellence by enforcing Safaricom’s governance, information security, health, safety, and wellbeing standards across all managed security operations.

Qualifications or requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications, Software Engineering, or a related field.
• Minimum 5–7 years of hands-on experience in cybersecurity engineering, MSSP delivery, or enterprise security architecture.
• Must hold at least two or more recognized industry certifications across the following tracks:
• CISSP, CISM, CISA, or CRISC (Strongly Preferred)
• CCSP, AWS/Azure Security Specialty, Fortinet NSE/FCP/FCX, Palo Alto PCNSE
• Offensive/Defensive Operations: CEH, CySA+, or CompTIA Security+
• Methodology: ITIL v4, PMP, or PRINCE2 (Added advantage)
• Deep understanding of ISO 27001, NIST CSF, Data Protection Acts, risk management, and regulatory compliance auditing.
• Hands-on domain mastery over SOC/MDR architectures, SASE, Cloud Security, Threat Intelligence, and Endpoint Protection.
• Proven track record in managing OEM relationships (e.g., Fortinet, Palo Alto, Microsoft, CrowdStrike, Cisco) and vendor SLAs.

• Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work.
• All employees have a responsibility to adhere to safety, health, and wellbeing policies, guidelines and procedures in all actions and decisions.
• Provide strategic technical leadership for Safaricom’s Managed Security Services (MSS) portfolio, ensuring alignment with global cybersecurity standards, Zero Trust principles, and evolving threat landscapes.
• Lead the architecture, deployment, optimization, and continuous improvement of core security services, including SOC/MDR, NGFW, SASE, ZTNA, EDR/XDR, Cloud Security, and Vulnerability Management.
• Drive continuous service improvement (CSI) initiatives to strengthen customers’ security posture, operational resilience, and service performance.
• Oversee Cybersecurity Governance, Risk, and Compliance (GRC), ensuring adherence to frameworks such as ISO 27001, NIST CSF, PCI-DSS, GDPR, and applicable data protection regulations.
• Lead enterprise security risk assessments, audit readiness, compliance reporting, and the implementation of automated risk and third-party governance processes.
• Partner with Product, Sales, and Enterprise teams to develop customer-centric managed security solutions and provide technical leadership for strategic bids, RFPs, and enterprise engagements.
• Translate complex cybersecurity risks, technologies, and compliance requirements into clear business value for executive stakeholders and customers.
• Build and manage strategic relationships with cybersecurity vendors, cloud providers, and technology partners while overseeing vendor governance, SLAs, and technology roadmaps.
• Serve as a trusted cybersecurity advisor by leading executive security reviews, incident debriefs, threat intelligence sharing, and stakeholder engagement across enterprise customers.
• Ensure operational excellence by enforcing Safaricom’s governance, information security, health, safety, and wellbeing standards across all managed security operations.

• Cybersecurity engineering
• MSSP delivery
• Enterprise security architecture
• SOC/MDR architectures
• SASE
• Cloud Security
• Threat Intelligence
• Endpoint Protection
• OEM relationship management
• Vendor SLAs

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications, Software Engineering, or a related field.
• Minimum 5–7 years of hands-on experience in cybersecurity engineering, MSSP delivery, or enterprise security architecture.
• At least two or more recognized industry certifications across the following tracks: CISSP, CISM, CISA, or CRISC (Strongly Preferred), CCSP, AWS/Azure Security Specialty, Fortinet NSE/FCP/FCX, Palo Alto PCNSE, CEH, CySA+, or CompTIA Security+.
• Methodology certifications: ITIL v4, PMP, or PRINCE2 (Added advantage).
• Deep understanding of ISO 27001, NIST CSF, Data Protection Acts, risk management, and regulatory compliance auditing.
• Hands-on domain mastery over SOC/MDR architectures, SASE, Cloud Security, Threat Intelligence, and Endpoint Protection.
• Proven track record in managing OEM relationships (e.g., Fortinet, Palo Alto, Microsoft, CrowdStrike, Cisco) and vendor SLAs.