Senior Cloud & Network Security Engineer at Standard Investment Bank

Standard Investment Bank

  • Nairobi
  • Permanent
  • Full-time
  • Just now
About the RoleWe are seeking a highly skilled and experienced Senior Cloud & Network Security Engineer to join our team. This is a critical role that will be responsible for the design, implementation, and management of robust security controls across our cloud-based and on-premise network environments. The ideal candidate will possess deep expertise in both cloud security principles and traditional network security technologies, with a proven ability to build resilient, scalable, and compliant security postures. You will play a key role in integrating security throughout our software development lifecycle and ensuring our infrastructure adheres to the highest security standards.Key ResponsibilitiesCloud Infrastructure & DevOps
  • Design, build, and maintain robust and scalable cloud infrastructure and services on platforms.
  • Automate cloud infrastructure deployments and management using Infrastructure as Code (IaC) tools like Terraform, Ansible, or CloudFormation.
  • Collaborate with development teams to design and implement secure CI/CD pipelines and foster a DevSecOps culture.
  • Monitor cloud environments for performance, security, and cost optimization, providing timely troubleshooting and issue resolution.
  • Manage containerization technologies (e.g., Docker, Kubernetes) and their integration within the cloud ecosystem.
  • Develop and maintain scripts in Python, Bash, or PowerShell to automate operational tasks.
Cybersecurity & Application Security
  • Lead the design, implementation, and management of security solutions to protect our IT infrastructure, networks, and systems.
  • Conduct secure code reviews, static and dynamic application security testing (SAST/DAST), and vulnerability assessments.
  • Perform penetration testing on web applications, APIs, and mobile applications to identify and mitigate risks.
  • Work closely with development teams to remediate security vulnerabilities and embed security best practices into the SDLC.
  • Implement and manage security tools and technologies such as firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM) systems, and Web Application Firewalls (WAF).
  • Monitor security incidents, investigate breaches, and lead incident response efforts.
Compliance & Strategy
  • Ensure continuous compliance with internal security policies and external regulations and frameworks (e.g., ISO 27001, DPA, NIST, GDPR).
  • Develop and maintain security documentation, policies, and training materials.
  • Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and emerging security technologies to continuously improve our defense posture.
  • Collaborate with IT and business teams to ensure secure system architecture and configurations are in place from the design phase.
QualificationsRequired:
  • Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related technical field.
  • Minimum of 7 years of progressive experience in a similar Senior IT, Cloud, or Cybersecurity Engineering role.
  • Demonstrable experience with at least one major cloud computing platform
  • Strong understanding of application security principles and common vulnerabilities (e.g., OWASP Top 10).
  • Proficiency in at least one scripting or programming language (e.g., Python, Bash, Java, or JavaScript).
  • Experience with a variety of security testing tools (e.g., Burp Suite, OWASP ZAP, SonarQube).
  • Deep knowledge of network security, operating systems, security protocols, and security best practices.
  • Hands-on experience with security tools like firewalls, IDS/IPS, SIEM systems, and endpoint protection.
  • Proven ability to conduct vulnerability management, threat monitoring, and incident response.
Preferred Certifications:
  • General Security: CISSP, CISM, CompTIA Security+, CEH.
  • Application Security: CSSLP, OSCP.
  • Cloud: AWS Certified Solutions Architect, Microsoft Certified: Azure Administrator, Google Professional Cloud Engineer, or similar cloud-specific certifications.
Skills & Attributes:
  • Strong analytical and problem-solving skills with a keen attention to detail.
  • Excellent communication and collaboration skills, with the ability to work effectively across technical and non-technical teams.
  • Ability to work independently, manage multiple priorities, and lead complex projects.
  • A strong passion for continuous learning in the rapidly evolving fields of cloud computing and cybersecurity.
Method of ApplicationInterested and qualified? Go to to applyBuild your CV for free.

Myjobmag