Consulting Service Line, Cybersecurity Consultant

Role Overview

This position sits within a global professional services firm's cybersecurity practice, where you will help clients identify, assess, and respond to complex security threats across their technology environments. Day to day, you will carry out security testing, evaluate control frameworks, and turn technical findings into clear business recommendations. Your work directly supports client trust and resilience, making this a high-impact role for someone who wants to grow into a senior cyber risk adviser while applying hands-on technical skills.

Key Responsibilities

• Plan and execute vulnerability assessments, penetration tests, and enterprise-wide security reviews that align with the firm's quality and technical excellence standards.
• Evaluate security architectures across cloud, identity, data protection, container, and API environments, identifying weaknesses and practical remediation steps.
• Translate complex cybersecurity findings into business risks for internal and external stakeholders, including non-technical senior audiences.
• Support red teaming assignments and collaborate on Security Operations Center (SOC) engagements, including SIEM deployment and tuning efforts.
• Advise clients on aligning with recognised frameworks such as NIST CSF, ISO 27001, and COBIT, and help map their current posture against these standards.
• Research emerging threats, regulatory requirements, and new technologies to keep client guidance current and relevant.
• Contribute to business development activities by drafting proposals, preparing client presentations, and participating in scoping discussions.
• Work collaboratively within multi-level teams, managing multiple projects under tight deadlines and clearly documenting technical evidence.

Requirements & Qualifications

• Bachelor's degree in Computer Science, BBIT, Software Engineering, or a directly related field.
• At least one professional certification such as CISSP, CISM, CEH, GSEC, CDPSE, CompTIA Security+, GPEN, or CCNA, or an equivalent recognised security/network credential.
• Strong academic background: a minimum overall grade of B in KCSE, with at least a B in both English and Mathematics.
• 2–6 years of experience working in dynamic IT environments, including 1–2 years specifically focused on cybersecurity or cyber risk-related work. Prior experience in cybersecurity consulting, IT audit, or a professional services firm is preferred.
• Demonstrated hands-on experience delivering vulnerability assessments, penetration tests, and comprehensive security assessments with meticulous attention to quality.
• Applied knowledge of red teaming, Identity and Access Management (IAM), cloud security, data protection and privacy, container security, API security, and integration security.
• Familiarity with the intersection of AI and cybersecurity, and an interest in how emerging AI-driven threats and defences affect client environments.
• Firm understanding of security frameworks including NIST CSF, ISO 27001, and COBIT, with the ability to apply them in practical client situations.
• Experience with SIEM deployments and Security Operations Center operations is an advantage.
• Solid project management skills, including the ability to prioritise work, meet deadlines, and communicate progress clearly.
• Strong analytical skills, an unwavering commitment to integrity and ethics, and the self-motivation to continuously update your technical knowledge in a fast-moving field.

What We Offer / Why Join

Joining this team means working alongside respected cyber security professionals who will act as mentors and coaches as you build your career. You can expect structured support to develop both your technical skills and your client-facing capabilities, along with the freedom and flexibility to shape how you deliver on your responsibilities. This is an environment that values continuous learning and offers a clear path for progressing into more senior advisory roles.