Position: Cyber Security Engineer

Reports to: Information Security Manager

Type of Employment: Full-time

Job announcement Date: 9^th July 2026

Job Summary:

The Cybersecurity Engineer keeps the organization secure by thinking like an attacker and defending like a professional. You spend most of your time on hands-on Red Team (offensive) and Blue Team (defensive) activities: finding weaknesses before adversaries do, and detecting, investigating, and responding to threats when they appear

Roles & Responsibilities:

• Conduct internal and external vulnerability assessments and penetration tests across servers, endpoints, applications, perimeter/internet-facing assets, and telecom platforms.
• Simulate real-world attacks (phishing, social engineering, exploitation) to test defenses and response readiness.
• Exploit and document findings, then work with owners to get them fixed.
• Track remediation and re-test to confirm issues are closed.
• Lead the annual independent VAPT engagement and internal assessments required.
• Monitor environment using SIEM, EDR, firewalls and Anti-DDoS; triage alerts and hunt for threats.
• Detect, investigate, and respond to security incidents; contain, eradicate, and recover.
• Perform root-cause analysis and write clear incident reports.
• Perform basic malware analysis on suspicious files and indicators of compromise.
• Harden systems: baseline configurations, patching, and detection rules.
• Tune and maintain security tooling and detection content.
• Develop security automation scripts and playbooks for faster detection and response.
• Develop, test, and update incident response playbooks and run tabletop exercises; share findings and lessons learned.
• Support security awareness and phishing-simulation programmes.
• Secure, monitor, and harden network and telecom infrastructure (routers, switches, firewalls, and core telecom systems).
• Coordinate vulnerability and patch management across systems and network devices.
• Review the security of new systems, applications, and network changes before go-live.
• Use threat intelligence to anticipate emerging threats and keep detection content up to date.
• Produce weekly and monthly reports on incidents, attempts and threats with clear metrics & trends.
• Prepare management-ready vulnerability reports with clear risk levels and remediation priorities.
• Perform digital forensics and preserve evidence during investigations.
• Review identity and access controls, including privileged accounts.
• Collaborate across offensive and defensive activities to strengthen detection and response.

Required Qualifications:

• Having Bachelor’s Degree in Information Technology (IT), Computer Science, or a related field (or equivalent experience) (Mandatory).
• Hands-on penetration testing certification such as CEH Practical or equivalent (Mandatory).
• Security certifications covering offensive (e.g. OSCP) and defensive (e.g. GCIH, GCIA, BTL1, CySA+, Blue Team), and skills foundational certs such as Security+ (Added advantage)

Required Experience:

• 3+ years in VAPT, SOC, or security operations (telecom environment preferred).
• Strong knowledge of networks, telecommunications, and operating systems (Windows/Linux), with deep understanding of attack and defence techniques (e.g. MITRE ATT&CK).
• Understanding of local telecom and cybersecurity regulations and how they apply to security operations (e.g. regulations issued by regulators such as RURA and the NCSA, among others).
• Hands-on with VAPT tools (Burp Suite, Nessus, Nipper, Metasploit), SIEM (e.g. ELK, Splunk, QRadar, Sentinel), EDR/XDR, and Anti-DDoS solutions.
• Scripting / automation skills (Python, Bash, or PowerShell).
• Familiarity with threat intelligence and detection engineering
• Strong analytical skills and clear written and verbal communication.

Application procedure:

Interested candidates are required to submit the following documents:

• A signed application letter addressed to the Chief Executive Officer (CEO) of KTRN.
• A copy of notarized required academic degree
• A copy of a valid National Identity Card (ID);
• A criminal Record
• An updated Curriculum Vitae (CV) including at least three (3) professional referees and their contact details;
• Supporting documents demonstrating the required work experience.
• All application documents must be combined into a single PDF file and submitted via email to recruits@ktrn.rw no later than 16^th July 2026 at 5:00 PM.
• Only shortlisted candidates shall be contacted

KTRN Management