Engineer – Information Security

MAL Consultancy is a human resource solutions and services consulting company based in Kenya, providing strategic and operational support to align your people strategy to drive the achievement of your strategic business needs. We pride in having expertise in a broad range of specialties in human resource management as strategic business partners.

Engineer – Information Security

Our client, a real-time payment services company established under the National Payment System (NPS) Act, to address the challenge of inter-bank money transfers in the country and beyond, is seeking to onboard an Engineer – Information Security.

JOB SUMMARY

• The Engineer – Information Security is responsible for designing, implementing, and maintaining security measures to protect the business payment infrastructure. S/he will be in charge of ensuring end-to-end network and application security assessments, integrating security into the software development lifecycle (DevSecOps), while ensuring compliance with industry regulations (e.g., CBK Cybersecurity Guidelines, PCI DSS). The Engineer – Information Security will also be responsible for the optimization of security tools for maximum effectiveness across both on-premise and cloud environments.

DUTIES & RESPONSIBILITIES

Security Architecture & Design

• Develop secure architecture for new systems and services, ensuring alignment with best practices (e.g., Zero Trust principles, micro-segmentation) and regulatory requirements

• Design and enforce cloud security controls (AWS, Azure, GCP) to protect resources, data, and services.

Endpoint Protection Management

• Configure and manage endpoint protection solutions on all laptops and devices to prevent malware, viruses, shadow IT, and other security threats

• Configure, monitor, and tune security tools (e.g., SIEM, EDR, WAF, IAM solutions) to ensure optimal coverage and timely threat detection

• Evaluate emerging security technologies and make recommendations for improvements or replacements.

Secure Access Management

• Deploy and manage Zero Trust Network Access (ZTNA) controls to provide secure access to applications and data, both on-prem and cloud, following identity management models such as least privilege and role-based access

• Implement privileged access management (PAM) solutions to enforce least privilege principles and control access to sensitive systems and resources.

Enterprise Applications / Infrastructure

• Fine-tune and operate vulnerability scanning tools, interpret reports, and prioritize remediation efforts. This will include coordinating patch management activities with system owners and track remediation progress to closure

• Perform security hardening of the Google Workspace environment, including configuration of security settings, access controls, mobile device management, and data protection measures.

Network and Data Security: