Cybersecurity careers in Kenya: jobs, skills and certifications

As more of Kenya's money, health records and government services move online, the need to protect them grows. Banks, telcos, insurers, fintechs, hospitals and government all hire security staff, and the field is short of experienced people. This guide explains the roles and how to get into them.

Which laws drive security work in Kenya?

Two laws shape much of the demand. The Computer Misuse and Cybercrimes Act of 2018 deals with crimes such as unauthorised access and fraud. The Data Protection Act of 2019 created the Office of the Data Protection Commissioner and sets rules on how organisations collect and protect personal data. Regulated sectors, especially banking, add their own security requirements. Together they mean organisations need people who can protect systems and show they comply.

Which cybersecurity jobs are there?

• Security operations centre (SOC) analyst: monitoring alerts and responding to incidents. A common entry role.
• Information security officer: policies, risk assessments, awareness training and compliance.
• Penetration tester: testing systems by attacking them, with permission.
• Security engineer: building and running firewalls, identity systems and security tools.
• Governance, risk and compliance (GRC) and data protection roles, increasingly common since the Data Protection Act.

Which certifications matter?

CompTIA Security+ is a widely recognised starting point. Ethical hacking and penetration testing certifications such as CEH or OSCP suit offensive roles. CISA and ISO 27001 qualifications suit audit and compliance roles, and CISSP or CISM suit senior and management roles. Banks and auditors often ask for a specific one, so check the adverts for the roles you want.

Which skills do employers test?

• Networking and operating systems, especially Linux and Windows. Security is built on these.
• Reading logs and spotting unusual activity.
• How common attacks work, such as phishing, malware and weak passwords, and how to stop them.
• Scripting, for example Python or PowerShell.
• Writing clear incident reports and explaining risk to managers.

How do you start a cybersecurity career?

Most people move in from IT support, networking or development, where they learn how systems work. Practise legally on training platforms and capture-the-flag competitions, study for one certification, and ask to help with security work in your current job. Read our guides to IT support jobs and network engineering for the usual starting points.

What do security interviews ask?

Expect questions on how you would investigate a suspicious login, how a common attack works, how you would secure a new server, and how you would explain a risk to a manager. Be honest about what you do not know and explain how you would find out.

Browse cybersecurity jobs in Kenya, updated every day.