Cybersecurity Analyst — AppSec & Cloud Security

About the role

As a fintech platform processing millions of shillings daily, security is not a department — it is a core engineering discipline. We are hiring a Cybersecurity Analyst who will own our application security programme, lead our cloud security posture, and build a culture of security-first engineering across the entire product team. In this role you will conduct threat modelling for new product features, perform application security reviews of code and APIs before they reach production, and manage our vulnerability disclosure programme. You will run regular penetration tests — both internally and by coordinating with external red teams — and you will ensure that findings are triaged, tracked, and remediated. You will work closely with our DevOps team to implement security controls at the infrastructure layer and ensure our AWS environment adheres to best practices and our PCI-DSS obligations. You will be the primary author of our security policies, incident response playbooks, and employee security training materials. You will work with our compliance team on Central Bank of Kenya reporting requirements and you will represent security in conversations with enterprise customers who conduct their own vendor security assessments. Strong candidates bring experience in OWASP Top 10 vulnerabilities, API security, JWT and OAuth attack vectors, and container security. You understand how to assess the security posture of a Kubernetes cluster, how to harden IAM policies, and how to use tools like Semgrep, Trivy, and Prowler as part of an automated security pipeline. Experience with SIEM platforms and log analysis is important, as is the ability to write clear, actionable security reports for both technical and non-technical audiences. We offer a market-leading salary, dedicated security tooling budget, support for professional certifications (CEH, OSCP, AWS Security Specialty), and the satisfaction of knowing that the security work you do protects real customers' real money.