Cyber Security Administrator (Analysis)

Kenya Airways is seeking a Cyber Security Administrator (Analysis) to strengthen the security of its information systems, digital assets, and supporting infrastructure. Based at Kenya Airways Headquarters in Nairobi, the role focuses on offensive security, penetration testing, vulnerability assessments, security analytics, adversary emulation, and translating technical findings into actionable security improvements.

Job Overview

• Organization: Kenya Airways PLC
• Job Title: Cyber Security Administrator (Analysis)
• Division: Information Technology
• Employment Type: Permanent
• Location: Kenya Airways Headquarters, Nairobi
• Expiry Date: October 3, 2026 at 6:24pm

Purpose

The Cyber Security Administrator is responsible for safeguarding Kenya Airways’ information systems, digital assets, and supporting infrastructure through offensive security operations. The role involves penetration testing, red team simulations, adversary emulation, vulnerability assessments, and security analysis to proactively identify weaknesses and validate security controls.

The position requires a hands-on, attacker-minded professional who can analyze complex technical findings and provide clear remediation recommendations that strengthen the organization’s cybersecurity posture.

Responsibilities

• Identify, assess, and manage cybersecurity risks through offensive testing and defensive analysis.
• Develop risk mitigation strategies and prioritize security investments to protect critical assets.
• Conduct penetration testing and adversary emulation exercises to uncover vulnerabilities, validate security controls, and drive remediation.
• Assess the adequacy of security controls for airline information and technology systems and make recommendations to the cybersecurity engineer.
• Collaborate with developers, systems engineers, database engineers, security engineers, project managers, cybersecurity administrators, and SOC analysts.
• Plan, scope, and execute penetration tests on internal and external networks, web applications, APIs, mobile applications, cloud environments, and infrastructure.
• Simulate advanced persistent threats (APTs) and real-world attacks.
• Conduct regular vulnerability scans across Kenya Airways systems and infrastructure.
• Analyze and prioritize vulnerabilities based on risk, exploitability, and business impact.
• Collect, analyze, and interpret security-related data from multiple sources to identify patterns, anomalies, and potential threats.
• Develop and maintain custom security analytics models and algorithms.
• Produce detailed penetration testing reports containing findings, risk ratings, proof-of-concept evidence, and actionable remediation recommendations.
• Present security findings clearly and concisely to technical teams and senior management.
• Contribute to SIEM tuning and detection rule development based on offensive security findings.
• Support incident response investigations by providing attacker-perspective analysis.
• Work with Internal Audit and External Audit consultants on required security assessments and audits.
• Ensure projects and systems undergo security checks before and after go-live.
• Continuously test and validate existing security controls and identify security issues within the organization.
• Evaluate organizational security needs and establish appropriate offensive security practices and standards.
• Respond to system and network security breaches.
• Ensure organizational data and infrastructure are protected through appropriate security controls.
• Implement security automation to support effective and efficient security protocols.
• Investigate breaches and implement incident response plans while using lessons from previous incidents to strengthen security protocols.

Skills

• Excellent communication, interpersonal, and problem-solving skills, with the ability to work confidently on high-priority problems.
• Strong analytical and critical-thinking skills with an attacker’s mindset.
• Ability to handle pressure and difficult situations with resilience and calmness.
• Unquestionable integrity and strong ethical standards.
• Self-motivation and passion for continuous learning in cybersecurity.
• Commitment to responsible disclosure practices.

Qualifications

• Education: Bachelor’s degree in Information Technology or another related field.
• Experience: 3+ years of advanced IT experience with a high level of information security expertise, including hands-on testing and offensive security experience.
• Proven experience in penetration testing, ethical hacking, and vulnerability assessments.
• Experience using various security tools to assess an organization’s security posture.
• Familiarity with security auditing processes.
• Strong knowledge of Linux commands, scripting, and Windows security controls.
• Ability to configure systems to identify intrusions according to organizational requirements.
• Strong knowledge of networking protocols and common attack vectors.
• Experience performing information security audits or risk assessments.
• Certifications: Industry certifications such as OSCP, OSWE, CEH, GPEN, GWAPT, CRTP, or equivalent offensive security certifications are highly preferred.
• Knowledge of securing network technologies, applications, and operating systems.
• Experience responding to, analyzing, and communicating information security incidents and performing forensic activities.
• Excellent interpersonal, communication, and presentation skills, including formal report writing experience.
• Understanding of security standards and regulations including PCI DSS, NIST, ISO 27001, GDPR, and IOSA.
• Ability to enforce security best practices in line with the National Institute of Standards and Technology (NIST).

How To Apply

Interested and qualified candidates should submit a detailed Curriculum Vitae through the Kenya Airways career portal. The position is based at Kenya Airways Headquarters, Nairobi, and only qualified applicants with the right to live and work at the stated location will be considered. Due to the volume of applications received, only shortlisted candidates will be contacted.