Applications and Data Security Engineer

Role Description

• This is a full-time on-site role for an Applications and Data Security Engineer at Solutech Limited in Nairobi County, Kenya. The engineer will be responsible for ensuring the security of applications and data, implementing security measures, performing security assessments, and responding to security incidents.
• Implement and manage security controls and monitoring systems, ensuring compliance with data protection rules.
• Lead security audits and assessments, including data protection impact assessments (DPIAs)
• Lead DevSecOps responsibilities, including integrating security into the development pipeline, automating security testing, and ensuring secure coding practices
• Lead or support response to security incidents and breaches, including data breaches, and prepare comprehensive reports.
• Plan, set up, and implement the security infrastructure for the Company, ensuring compliance with data protection laws.
• Provide advice and recommendations to the Company regarding data protection rules
• Maintain up-to-date and relevant data and security policies in line with various security and data protection laws
• Perform vulnerability assessments on applications and cloud infrastructure, and collaborate with the engineering team to resolve issues
• Conduct investigations in situations where data breach occurs or is detected, and prepare comprehensive reports
• Prepare material and train staff on security and data protection practices
• Collaborate with development, and QA teams to prioritize security tasks and ensure security best practices are followed throughout the development lifecycle

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field
• 3-5 Years experience in Cyber Security or related field
• Certifications such as CompTIA Security+, eCPPT, eJPT, PNPT, GIAC, S-DPP or any related certifications are a plus
• Knowledge of various security frameworks
• In-depth understanding of data protection regulations
• Ability to interpret and apply regulatory requirements to the organization’s data processing activities
• Proficiency in secure coding practices and software development life cycle
• Familiarity with security tools and relevant software