{"id":2029152,"url":"https://alion.io/job/mal-consultancy-engineer-information-security-2","title":"Engineer – Information Security","company":{"id":3905434,"name":"MAL Consultancy","domain":"mal-consultancy.com","url":"https://alion.io/company/mal-consultancy","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Nairobi, Kenya"],"countries":["KE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":25000,"max_usd":60000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"Bash","optional":true},{"name":"CI/CD","optional":true},{"name":"ISO 27001","optional":true},{"name":"Linux","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Python","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-07T07:02:23Z","employer_posted_date":null,"last_verified_at":"2026-10-07T07:02:23Z","board_verified":false,"closed_at":null,"days_open":13,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":13},"description":"MAL Consultancy is a human resource solutions and services consulting company based in Kenya, providing strategic and operational support to align your people strategy to drive the achievement of your strategic business needs. We pride in having expertise in a broad range of specialties in human resource management as strategic business partners.\n\nEngineer - Information Security\n\nOur client, a real-time payment services company established under the National Payment System (NPS) Act, to address the challenge of inter-bank money transfers in the country and beyond, is seeking to onboard an Engineer – Information Security.\n\nJOB SUMMARY\n\n The Engineer - Information Security is responsible for designing, implementing, and maintaining security measures to protect the business payment infrastructure. S/he will be in charge of ensuring end-to-end network and application security assessments, integrating security into the software development lifecycle (DevSecOps), while ensuring compliance with industry regulations (e.g., CBK Cybersecurity Guidelines, PCI DSS). The Engineer – Information Security will also be responsible for the optimization of security tools for maximum effectiveness across both on-premise and cloud environments.\n\nDUTIES & RESPONSIBILITIES\n\n Security Architecture & Design\n\n Develop secure architecture for new systems and services, ensuring alignment with best practices (e.g., Zero Trust principles, micro-segmentation) and regulatory requirements\n\n Design and enforce cloud security controls (AWS, Azure, GCP) to protect resources, data, and services.\n\nEndpoint Protection Management\n\n Configure and manage endpoint protection solutions on all laptops and devices to prevent malware, viruses, shadow IT, and other security threats\n\n Configure, monitor, and tune security tools (e.g., SIEM, EDR, WAF, IAM solutions) to ensure optimal coverage and timely threat detection\n\n Evaluate emerging security technologies and make recommendations for improvements or replacements.\n\nSecure Access Management\n\n Deploy and manage Zero Trust Network Access (ZTNA) controls to provide secure access to applications and data, both on-prem and cloud, following identity management models such as least privilege and role-based access\n\n Implement privileged access management (PAM) solutions to enforce least privilege principles and control access to sensitive systems and resources.\n\nEnterprise Applications / Infrastructure\n\n Fine-tune and operate vulnerability scanning tools, interpret reports, and prioritize remediation efforts. This will include coordinating patch management activities with system owners and track remediation progress to closure\n\n Perform security hardening of the Google Workspace environment, including configuration of security settings, access controls, mobile device management, and data protection measures.\n\nNetwork and Data Security:\n\n Secure data at rest by implementing secure key management practices, encryption algorithms, and access controls to protect sensitive information. This includes implementation and management of secure key management solutions to safeguard cryptographic keys used for encryption and decryption\n\n Manage security certificate lifecycle, including issuance, renewal, and revocation, to ensure the integrity and authenticity of digital certificates used for authentication and encryption\n\n Collaborate with infrastructure teams to ensure network devices are hardened and monitored.\n\nSecure Coding (DevSecOps)\n\n Collaborate with DevOps teams to integrate security practices into the software development lifecycle (DevSecOps), including secure coding practices, code review, and automated security testing\n\n Perform API and application security assessments; work closely with developers to integrate secure coding practices, conduct threat modeling, and perform code reviews\n\n Collaborate with cross-functional teams to integrate security requirements into software development and infrastructure deployment processes.\n\nContinuous Improvement\n\n Stay updated on the latest security trends, threats, and technologies.\n\n Identify and lead initiatives that enhance the organizations’ overall security posture and resilience.\n\nAny other duties as required.\n\nEDUCATION SKILS KNOWLEDGE & EXPERIENCE REQUIRED\n\n Bachelor’s Degree in computer science, information security, or any other related field.\n\n Certifications including but not limited to CISSP, CEH, CISM, or OSCP are a plus\n\n 3+ years of experience in cybersecurity, preferably within payments, FinTech, or financial services\n\n Practical experience integrating security tools (SIEM, IDS/IPS, EDR) and frameworks (PCI DSS, ISO 27001, NIST)\n\n Hands-on experience with cloud security (AWS, GCP, or Azure)\n\n In-depth knowledge and understanding of network security concepts (firewalls, routing, network segmentation) and cloud security (AWS, GCP, Azure).\n\n Proficiency and expertise in security tools and technologies (SIEM, IDS/IPS, EDR, WAF, IAM, vulnerability scanners)\n\n Familiarity and expertise in DevSecOps tools and processes (CI/CD pipelines, containerization, automation scripting)\n\n Understanding of modern application security (OWASP Top 10, API security, secure coding practices)\n\n Knowledge of operating systems (Windows, Linux) and scripting languages (e.g., Python, Bash)\n\n Expertise in security assessments and vulnerability management\n\n Excellent verbal and written communication skills\n\n Ability to collaborate effectively in cross-functional team environments\n\n Strong documentation skills for maintaining security standards and teamwork records.","description_format":"text","description_chars":5605,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-07T13:36:30Z"}],"visa":[],"liveness":{"score":73,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.808,"p_room":0.9,"age_days":12,"expected_fill_days":22,"reasons":["seen:12","win:mid"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/mal-consultancy-engineer-information-security-2","json_url":"https://alion.io/job/mal-consultancy-engineer-information-security-2.json","meta":{"generated_at":"2026-10-20T15:48:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17934,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3905434},"rest":"https://alion.io/mcp/rest/get_company?id=3905434"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmal-consultancy-engineer-information-security-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmal-consultancy-engineer-information-security-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmal-consultancy-engineer-information-security-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mal-consultancy-engineer-information-security-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmal-consultancy-engineer-information-security-2"}]}