{"id":3520299,"url":"https://alion.io/job/cfa-digital-security-engineer","title":"Digital Security Engineer","company":{"id":4489873,"name":"CFA","domain":null,"url":"https://alion.io/company/cfa-4","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"UTC-1 – UTC+5","utc_offset_min":-1,"utc_offset_max":5},"hiring_geo_confidence":"inferred","locations":["Kenya"],"countries":["KE"],"hiring_countries":["KE"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"AI Agents","optional":true},{"name":"Linux","optional":true},{"name":"Windows","optional":true}],"status":"closed","first_seen_at":"2026-09-16T12:58:53Z","employer_posted_date":null,"last_verified_at":"2026-10-31T23:47:00Z","board_verified":false,"closed_at":"2026-10-31T23:47:00Z","days_open":45,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":45},"description":"IT Jobs. CFA Jobs. Digital Security Engineer leading technical incident response and security assessments, requiring a Bachelor’s degree in IT or Cybersecurity with 3+ years experience in security engineering focusing on incident response, in a non-profit digital security environment, remote role.\n\nCode for Africa (CfA) is recruiting a bilingual full-time Digital Security Engineer to lead technical incident response and security assessments at TrustLab, our nonprofit digital security lab working to safeguard frontline human rights defenders (HRDs), journalists and civil society organisations across Africa and the majority world.\n\nCandidates should possess a strong background in endpoint security and incident response, with demonstrable experience in providing support, conducting security assessments, investigating breaches, and implementing hardening measures across various devices and operating systems. Ideally, you have a deep understanding of the threat landscape in Africa and experience working with non-profit organisations or in the development sector. \n\nThis is both an engineering and a duty-of-care role. The people who contact TrustLab may be non-technical, under significant stress, or facing threats that extend well beyond their devices. We practise consent-first, victim-centred and trauma-informed incident response: we explain what we propose to examine, respect the limits of the client’s consent, minimise what we collect, and communicate the confidence and limitations of our findings honestly.\n\nCandidates must be fluent in English and French, and candidates who are fluent in an additional international language, such as Arabic or Portuguese, will have an advantage.\n\nKey Responsibilities\n\nRequired: minimum requirements include:\n\nBachelor’s degree in Information Technology, Computer Science, Computer Engineering, Cybersecurity, and similar technology degrees, or equivalent technology experience,\n\nDemonstrable experience supporting high-risk users like journalists and activists.\n\n3+ years experience in security engineering, or a similar role, with a strong focus on incident response and endpoint and application security,\n\nExperience with endpoint security tools and techniques, such as Mobile Device Management and anti-malware, \n\nHands-on experience investigating and responding to security incidents, including triage, forensic analysis, evidence preservation, containment, recovery and post-incident review, using SIEM, EDR or comparable security tools where appropriate,\n\nExperience conducting risk-based security assessments using techniques such as secure configuration review, vulnerability assessment, threat modelling or authorised penetration testing, and translating findings into practical, prioritised remediation,\n\nExperience with identity and access management such as MFA, SSO, least-privilege provisioning and deprovisioning,\n\nExperience with scripting languages for security automation (Python and shell scripting).\n\nDeep practical knowledge of macOS and iOS, including secure configuration, endpoint management, incident investigation and relevant security tooling, together with demonstrated ability to assess and support mixed-device environments,\n\nPassion for using technology to empower and protect civil society organisations,\n\nStrong organisational skills and ability to manage multiple priorities and tasks, and deliver results within deadlines, \n\nExcellent technical documentation and presentation skills, and\n\nProven ability to work and communicate with both technical and non-technical stakeholders. \n\nQualifications & Experience\n\nPreferred: candidates who can demonstrate the following will have an advantage:\n\nMaster’s degree in Cybersecurity, Information Security, or similar technology postgraduate degrees,\n\nExpertise in one or more of the following domains is highly desirable: Penetration Testing, Cloud Security, and Cryptography,\n\nFamiliarity with security risks involving generative-AI or agentic systems, and with the responsible, privacy-preserving use of AI-assisted tools in security workflows,\n\nWorking knowledge of Windows, Linux and Android, including their secure configuration, common security controls and relevant investigation tooling,\n\nHold one or more relevant security certifications such as eJPT, Security+, GCIH, CySA+, OSCP,\n\nExtensive knowledge of digital security issues and threat vectors in the African context, \n\nExperience working with non-profit organisations or in the development sector is a plus, and\n\nExperience working in a fully remote environment.\n\nLanguage and Location Requirements:\n\nLocation: Remote. Candidates must be able to maintain at least four hours of overlap with the team’s core collaboration hours of 09:00–17:00 GMT+1.\n\nTimezone: GMT-1 to GMT+5\n\nLanguages: English and French\n\nNice to have: Arabic or Portuguese.\n\nHow to Apply\n\nClick Here to Apply","description_format":"text","description_chars":4878,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Kenya","iso":"KE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-30T11:37:17Z"},{"event":"close","at":"2026-10-31T23:47:00Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/cfa-digital-security-engineer","json_url":"https://alion.io/job/cfa-digital-security-engineer.json","meta":{"generated_at":"2026-11-01T06:32:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10034,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4489873},"rest":"https://alion.io/mcp/rest/get_company?id=4489873"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfa-digital-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfa-digital-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfa-digital-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfa-digital-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfa-digital-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3520299}},{"tool":"search_jobs","arguments":{"company":4489873,"detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3520299},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}