Cybersecurity Specialist, Security Testing at KCB Bank Kenya

KEY RESPONSIBILITIES: 

• Execute red team scenarios to highlight gaps impacting the organizations security posture. 
• Perform in-depth analysis of penetration testing results and create reports that describe findings, exploitation procedures, risks, and recommendations.
• Perform vulnerability assessment and penetration testing on the banks infrastructure and systems to ensure that they are secure from external or internal intrusion attempts thus reducing the risk of successful intrusions against KCB group.
• Provide technical VAPT related support to projects in a bid to ensure compliance to technical security policies and standards. Execute penetration testing projects using the established methodology, tools, and rules of engagements.
• Perform authorized attack surface reviews and penetration tests against specific targets at the direction of the Senior Managers Cybersecurity Assurance and Head, Group Cybersecurity. 
• Provide assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principles. 
• Assess the sufficiency of policies, standards and procedures relative to VAPT best practices. 
• Perform continuous vulnerability monitoring in the KCB group environment and report compliance failures to management for immediate remediation.
• Define, create, and deliver status reports and relevant metrics to the Senior Manager, Group Cybersecurity.
• Provide input into Information Security risk control self-assessments by leveraging specialized knowledge in VAPT.

Particulars Detail Specific Field or Qualification Need Type

Education

•  B.Sc. Information Technology / Computer Science / Cybersecurity / Engineering (Electrical, Electronic) or related field    RQ

Professional Qualifications

• Cybersecurity certification in either CISA/ CISM/ CISSP/ Security+/CEH    AT least one RQ     
• Penetration Testing / Cybersecurity Assurance Certification in either OSCP/ CPT/ LPT/ PenTest+/ ECSA/ CHFI/Cisco Cyberops Associate & Professional    AA          
• Master’s Degree    MBA / MSc     AA     

Total Minimum No of Years of Experience Required

5 years

Detail    Minimum No of Years    Need Type

• Experience in Cybersecurity    2    ES
• Experience in Vulnerability Management / Security Testing / Penetration Testing    1    ES
• Experience in System/ Network/ Database or Cloud Platform Administration    2    ES