Senior Engineer – Security Operation Center

United States International University - Africa (USIU-Africa) is seeking a highly skilled and dedicated Senior Engineer – Security Operation Center to join our IT Division. Located in the Kasarani area, off Thika Road in Nairobi, Kenya, USIU-Africa is an independent, not-for-profit institution serving 6,512 students from 69 nationalities, offering 24 degree programs from undergraduate to doctoral level.

This is a full-time position. The ideal candidate should hold a Bachelor’s Degree in Information Security or a related field, with a minimum of four (4) years’ experience in a full-time information security role and at least two (2) years of experience in a Security Operations Centre (SOC) role. Relevant professional certifications such as CISSP, CEH, or CHFI are required, with additional certifications (e.g., CISM, LPT, OSCP) being highly desirable. The candidate must possess advanced knowledge of IT security monitoring tools, including SIEM, SOAR, EDR solutions, and enterprise antivirus systems. Strong analytical, problem-solving, and communication skills are essential, along with the ability to work independently and as part of a team. Experience working in a higher education environment will be an added advantage.

Job Purpose: The Senior SOC Analyst at USIU-Africa plays a pivotal role in maintaining the security of the university’s information systems. This position involves proactive monitoring, incident detection, analysis, and response to ensure that the confidentiality, integrity, and availability of IT resources are maintained at all times. The Senior SOC Analyst will work closely with other IT Division technical teams to enhance security measures and address potential vulnerabilities within the university’s digital ecosystem.

Key Responsibilities/Tasks/Duties:

Security Monitoring and Threat Detection: Work in 24/7 rotational shifts to monitor security alerts generated by various security tools deployed within the university. Respond promptly to security alerts within defined procedural SLAs and policies. Conduct continuous monitoring to detect and mitigate potential threats.

Incident Response Support: Investigate security incidents to determine their source, scope, and impact. Develop and implement incident response plans to mitigate security threats. Conduct vulnerability and risk assessment exercises to preemptively identify risks. Collaborate with internal teams to manage and remediate security breaches and incidents.

Security Tools and Technologies: Maintain and optimize security tools, including SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection and Prevention Systems), and EDR (Endpoint Detection and Response Solutions). Identify and correlate security events to ensure prompt response to threats. Continuously improve security measures based on analysis of system vulnerabilities.

Security Operations Administration: Maintain cybersecurity asset inventories and documentation. Support onboarding of log sources into monitoring platforms. Support administration of cybersecurity platforms as assigned.

Log Analysis: Review system logs from different sources to analyze behaviour and detect policy violations. Take corrective action based on log analysis insights to mitigate security threats.

Threat Intelligence Research: Monitor and research emerging attack patterns and cyber threats. Stay up to date with industry best practices and trends in cybersecurity. Implement proactive threat intelligence measures to mitigate evolving security risks.

Compliance and Governance: Assist in implementing incident response procedures. Ensure that the university’s Information Security efforts comply with relevant industry standards and regulations. Manage General IT Controls (ITC) to maintain robust security governance.

Key Relationships: The successful candidate will work collaboratively with the IT Division, university departments, schools, and administrative units to ensure effective security service delivery and support the institution’s strategic objectives.

Knowledge, Skills and Experience Required for the Role:

Education: Bachelor’s Degree in Information Security or a related field from a recognized university. Master’s Degree in Information Security or a related field will be an added advantage.

Professional Certifications: Relevant professional certification such as CISSP, CEH, or CHFI. Additional industry certifications (e.g., CISM, LPT, OSCP) are highly desirable. Membership in a recognized professional body.

Work Experience: Minimum of four (4) years of experience in a full-time information security role. At least two (2) years of experience in a Security Operations Centre (SOC) role. Experience working in a higher education environment will be an added advantage.

Technical Competencies: Advanced knowledge and experience in deploying and managing IT Security monitoring tools, including SIEM solutions, SOAR (Security Orchestration, Automation, and Response), enterprise antivirus systems, and Endpoint Detection and Response (EDR) solutions. Strong knowledge of networks, firewalls, and intrusion detection systems, web proxies, Windows, and Linux systems (both on-premise and cloud-based). Familiarity with Information Security and Privacy best practices and laws, especially within a higher education context. Experience with risk management frameworks, including NIST SP-800, ISO 27001, and NIST Cybersecurity Framework (CSF).

Soft Skills and Competencies: Strong analytical and problem-solving skills. Excellent written and verbal communication skills. Ability to work independently and as part of a team. Ability to present complex technical information in a clear and concise manner. Strong attention to detail. High level of integrity and professionalism. Willingness to learn and develop cybersecurity expertise. Ability to manage multiple priorities effectively.

Competencies Required for this Role: Strong analytical and problem-solving abilities. Excellent written and verbal communication skills. Ability to work independently and as part of a team. Strong attention to detail. High level of integrity and professionalism. Willingness to learn and develop cybersecurity expertise. Ability to manage multiple priorities effectively. Proficiency in security information systems and database management. Strong organizational and project management skills.

Method of Application: Interested applicants must provide a cover letter and a current CV, certified copies of educational certificates and transcripts, names and addresses of three referees (two of whom must be your current and previous employer), current salary and benefits, and telephone and e-mail

[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]