Cyber Security Specialist Job At Kenya Internet Security Advisory

Kenya Internet Security Advisory a Cyber Security Company providing comprehensive protection and advisory services to Individuals, Businesses,  Organizations & institutions  is looking for a Cyber Security Specialist to join our team.

The successful candidate will play a vital role in strengthening the security operations of our clients, safeguarding their digital environments from evolving cyber threats. You will monitor, detect, and respond to incidents while implementing preventive measures to enhance security posture across multiple organizations.

Key Responsibilities

Email Security

• Manage and optimize Secure Email solutions for multiple clients.
• Implement and maintain email security protocols (SPF, DKIM, DMARC).
• Investigate and respond to phishing, spoofing, and business email compromise attempts.
• Conduct awareness training to help client teams identify and report phishing attacks.

Website Security

• Monitor and protect client websites from cyber threats, including malware, defacement, and unauthorized access.
• Implement and maintain SSL certificates, secure hosting configurations, and web application firewalls (WAF).
• Conduct regular website vulnerability scans and penetration testing to identify and remediate security weaknesses.
• Ensure timely updates of CMS platforms, plugins, and scripts to prevent exploitation.
• Investigate and respond to website-related incidents such as data breaches or denial-of-service attacks.
• Work with web development teams to enforce secure coding practices and protect user data integrity.
• Generate detailed security reports and recommendations to improve web application resilience.

Server Security

• Monitor, secure, and maintain client servers to prevent unauthorized access, data breaches, and service disruptions.
• Implement and manage firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection for server environments.
• Conduct regular server vulnerability scans, patch management, and configuration hardening to reduce attack surfaces.
• Ensure secure deployment and management of cloud and on-premise servers, including access control and encryption policies.
• Respond to and investigate server-related security incidents, performing root cause analysis and remediation.
• Maintain detailed server security logs, audits, and compliance reports for clients.
• Collaborate with system administrators and IT teams to establish secure backup, recovery, and monitoring procedures.

Vulnerability & Patch Management

• Administer and support vulnerability management tools 
• Ensure timely updates and patches across client infrastructures.
• Work with IT teams to deploy, validate, and document remediation actions.
• Generate compliance and vulnerability reports for client stakeholders.

​​​​​​​Endpoint & Threat Management

• Manage Endpoint Detection & Response (EDR) tools 
• Perform proactive threat hunting and analyze security alerts.
• Conduct root cause analysis (RCA) and recommend corrective actions.
• Optimize alert configurations to improve accuracy and reduce false positives.

Incident Response & Monitoring

• Support incident response activities across multiple client environments.
• Monitor SIEM dashboards, investigate anomalies, and escalate threats as necessary.
• Document incidents, lessons learned, and improvement recommendations.
• Participate in tabletop exercises and security drills.

Governance, Risk & Compliance

• Support clients in maintaining compliance with ISO 27001, GDPR, NIST, and Kenya’s Data Protection Act, 2019.
• Assist with internal and external security audits.
• Maintain documentation, playbooks, and standard operating procedures (SOPs).

Continuous Improvement & Collaboration

• Stay current with the latest cyber threats, tools, and best practices.
• Collaborate with internal and client teams to enhance overall security posture.
• Contribute to the development and automation of security workflows and incident playbooks.

Skills & Qualifications

• Hands-on experience in Cyber Security.
• Proficiency with Secure Email Solutions.
• Strong understanding of SPF, DKIM, and DMARC protocols.
• Practical experience with vulnerability management tools
• Familiarity with EDR platforms
• Working knowledge of SIEM tools
• Solid understanding of incident response, threat hunting, and RCA processes.
• Excellent analytical, problem-solving, and communication skills.

Method of Application

Interested and qualified candidates should forward their CV to: careers@keinternetsecurity.com using the position as subject of email.