About us

TrendPro Systems is a Nairobi software company building systems for government, enterprises and NGOs. Read more about us.

The role

We are looking for an ICT Security Consultant for contract work, on a need basis, on public-sector and enterprise systems that handle personal data, payments, official certificates and more. You set the security requirements, test the system as an attacker would, see the findings fixed and produce the evidence that clients and auditors ask for.

What you will do

  • Write the security architecture, threat models and risk assessment, mapped to ISO/IEC 27001, NIST and OWASP.
  • Plan and carry out authorized penetration tests of web portals, APIs, Android and iOS apps, and cloud and container environments, then retest every fix.
  • Find the flaws scanners miss: broken access control, payment-callback tampering, certificate forgery and insecure offline data.
  • Run vulnerability scans, security checks in CI/CD and reviews of high-risk code.
  • Specify and verify firewalls, DDoS protection, rate limiting, tamper-evident logs and SIEM alerts.
  • Lead security input to Data Protection Impact Assessments and ICT Authority reviews, and write monthly security compliance reports.
  • Write the incident response plan and lead the response to security incidents.
  • Train developers in secure coding, and contribute to the security sections of proposals.

What you bring

  • Mandatory: a degree in cybersecurity, computer science, IT or a related discipline.
  • At least 5 years in cybersecurity, including at least 3 years of hands-on web and API penetration testing.
  • At least one current penetration testing certification: OSCP or OSCP+, CPTS, PNPT, GPEN, eCPPT, BSCP, OSWE, GWAPT, eWPT or CEH (hands-on exams preferred).
  • Strong Burp Suite and OWASP ZAP, with the ability to read code and script your own tools.
  • Mobile app testing, cloud and container security on AWS or Azure, and SIEM and incident-response experience.
  • Working knowledge of OWASP Top 10, ASVS, MASVS and ISO/IEC 27001, the Data Protection Act, 2019 and the Computer Misuse and Cybercrimes Act, 2018.
  • Clear writing: reports that developers can act on and managers can read.

A strong advantage

An information security management certification (ISO/IEC 27001 Lead Implementer or Lead Auditor, CISSP, CISM or CISA), a cloud or mobile security certification (AWS Certified Security – Specialty, CCSP or eMAPT), and security work on Kenyan government, payment or regulated systems.

How to apply

Send your CV and degree certificate to info@trendpro.co.ke with the subject “ICT Security Consultant – [your name]” by 30 November 2026. If you can, include a sample penetration test report with all client details removed.

TrendPro is an equal-opportunity employer. We assess every applicant on skills and experience only.