{"id":1585799,"url":"https://alion.io/job/kenya-airways-cyber-security-administrator-operations","title":"Cyber Security Administrator (Operations)","company":{"id":1794220,"name":"Kenya Airways","domain":"kenya-airways.com","url":"https://alion.io/company/kenya-airways","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kenya"],"countries":["KE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":33000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-21T09:44:00Z","employer_posted_date":null,"last_verified_at":"2026-09-21T09:44:00Z","board_verified":false,"closed_at":null,"days_open":39,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":39},"description":"IT Jobs, Kenya Airways Jobs. Cyber Security Administrator (Operations) manages security monitoring, incident response, and threat intelligence, requires an IT Degree and 3+ years experience.\n\nPurpose\n\nThe Cyber Security Administrator is responsible for safeguarding Kenya Airways’ information systems, digital assets, and supporting infrastructure through offensive security operations primarily conducting penetration testing, red team simulations, adversary emulation, and vulnerability assessments to proactively identify and exploit weaknesses before malicious actors do. The role demands a hands-on, attacker-minded professional who can think creatively, adapt to evolving threat landscapes, and translate complex technical findings into clear, actionable remediation guidance that strengthens the organization’s overall security posture.\n\nResponsibilities\n\nIdentify, assess, and manage cybersecurity risks through defensive analysis and offensive testing. This includes evaluating both internal and external threats and vulnerabilities.\n\nDevelop risk mitigation strategies informed by threat monitoring and incident analysis, prioritizing security investments to protect critical assets against evolving threats.\n\nDevelop and implement the system-wide Information Security function of the information security program to ensure information security risks are identified and monitored.\n\nContinuously identify, assess, and monitor information security risks across the organization and escalating emerging threats to inform defensive priorities.\n\nCollaborate with developers, Systems engineers, database engineers, security engineers, project managers, cybersecurity administrators and SOC analysts.\n\nImplement and fine tune security monitoring solutions, including SIEM (Security Information and Event Management) systems, to detect and respond to security incidents.\n\nCollaborate with internal teams to investigate and mitigate security breaches.\n\nTriage, investigate, contain, eradicate, and recover from security incidents while coordinating with internal teams and external partners as required.\n\nLead incident investigations using data-driven analysis, coordinate response efforts, and implement corrective actions to prevent recurrence\n\nMaintain and continuously improve incident response plans and playbooks for common attack scenarios.\n\nConsume and operationalize threat intelligence feeds and adversary TTPs to proactively update detection rules, block emerging IOCs, and inform defensive priorities.\n\nDeploy and maintain SOAR workflows to automate alert triage, enrichment, and routine response tasks reducing response times and analyst fatigue.\n\nOversee the deployment, configuration, and maintenance of security technologies, including EDR/XDR and encryption solutions among others.\n\nEnsure all defensive systems are patched, updated, and operating at optimal performance with high availability.\n\nAssist in executing vulnerability assessments, penetration tests, and adversary emulation exercises mapped to the MITRE ATT&CK framework to validate and stress-test defensive controls.\n\nCollaborate with SOC analysts in purple team exercises and translate offensive findings into actionable defensive improvements.\n\nWork with Internal Audit and External Audit consultants as appropriate on required security assessments and audits\n\nEnsure all projects and systems are subjected to security checks to avert possible security threats pre and post go-live\n\nRespond promptly to all system and network security breaches, ensuring containment, eradication, and recovery in line with documented procedures.\n\nImplement automation (SOAR) within the organization to enable efficient alert triage, incident response workflows, and routine security operations.\n\nEvaluate the organization’s security needs and establish defensive best practices, hardening baselines, and configuration standards accordingly.\n\nEnsure the organization’s data and infrastructure are protected through layered, defense-in-depth security controls across network, endpoint, application, and data layers.\n\nAssess the organization’s security posture through continuous monitoring, vulnerability scanning, and control validation.\n\nInvestigate breaches and incidents, conduct root cause analysis, and implement improvements to create ever more robust defensive protocols.\n\nSkills\n\nExcellent communication, interpersonal & problem-solving skills with the ability to work confidently on high-priority problems.\n\nStrong analytical and critical-thinking skills with an attacker’s mindset.\n\nAbility to handle pressure and difficult situations with resilience, calmly and effectively.\n\nMust be a person of unquestionable integrity.\n\nSelf-motivated with a passion for continuous learning in cybersecurity.\n\nStrong ethical standards and commitment to responsible disclosure practices.\n\nQualifications\n\nBachelor’s degree in information technology or another related field\n\n3+ years of advanced IT skills with high level of information security experience and expertise (hands-on experience in defensive cybersecurity operations).\n\nProven hands-on experience in security monitoring, incident detection and response, and vulnerability management.\n\nProficiency with SIEM platforms and experience with vulnerability scanning and management tools\n\nExperience in penetration testing, ethical hacking, and vulnerability assessments\n\nFamiliarity with security auditing processes\n\nWell versed with Linux commands, scripting as well as windows security controls adoption\n\nAbility to set up systems to identify intrusions, configuring these to suit the needs of the organization\n\nStrong knowledge of networking protocols and common attack vectors.\n\nExperience performing information security audits or risk assessments\n\nIndustry certifications highly preferred: CEH, CDSA CISSP, SSCP or equivalent defensive and offensive security certifications.\n\nKnowledge of securing network technologies, applications, and operating systems.\n\nExperience responding to, analyzing, and communicating information security incidents and performing forensic\n\nExcellent interpersonal, communication, and presentation skills, including formal report writing experience\n\nUnderstanding of common security standards and regulations relating to a higher education environment (e.g., PCI DSS, NIST, ISO27001, GDPR, IOSA etc.)\n\nCapable of enforcing security best practices in line with the National Institute of Standards and Technology.\n\nHow to Apply\n\nClick here to apply","description_format":"text","description_chars":6499,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Air Transport","Commercial Aviation"],"lifecycle":[{"event":"open","at":"2026-10-01T14:43:12Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":0.6,"p_active":0.69,"p_room":0.75,"age_days":39,"expected_fill_days":45,"reasons":["seen:39","win:late"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/kenya-airways-cyber-security-administrator-operations","json_url":"https://alion.io/job/kenya-airways-cyber-security-administrator-operations.json","meta":{"generated_at":"2026-10-31T06:19:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9284,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1794220},"rest":"https://alion.io/mcp/rest/get_company?id=1794220"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkenya-airways-cyber-security-administrator-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkenya-airways-cyber-security-administrator-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkenya-airways-cyber-security-administrator-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kenya-airways-cyber-security-administrator-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkenya-airways-cyber-security-administrator-operations"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1585799}},{"tool":"search_jobs","arguments":{"company":"kenya-airways.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1585799},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}