Cyber Security Engineer

Company: Ravnok

Location: Nairobi, Kenya — remote work within Kenya, with agreed client visits

Engagement: Independent contractor, project-based

Compensation: Agreed project fees, paid against defined milestones and accepted deliverables

About Ravnok

Know the risk. Fix the gaps. Keep control.

Ravnok helps Kenyan businesses become secure, compliant, and AI-ready—without needing a large in-house security team.

Our delivery system is straightforward:

• Assess — identify and prioritise weaknesses.
• Build — implement approved improvements and verify the results.
• Manage — keep agreed controls and actions current.

We are looking for a hands-on Security Engineer who can take ownership of technical work—from scoping and assessment through implementation, verification, and handover.

Your mission

Identify real weaknesses. Make controlled improvements. Prove the results.

You will work alongside Ravnok’s founder, who handles business development and operations, and a GRC consultant, who supports governance, risk, compliance, and documentation.

What you will doAssess

• Help define technical scope, effort, dependencies, and exclusions before engagements are sold.
• Review identity and access management, MFA, administrator privileges, and user offboarding.
• Review agreed email, endpoint, cloud, backup, and logging configurations.
• Conduct authorised vulnerability scanning and validate findings.
• Document evidence, affected assets, business impact, and remediation recommendations.
• Distinguish confirmed weaknesses from assumptions and unverified scanner results.

Build

• Prepare remediation plans and identify operational risks before changes.
• Implement approved improvements within your demonstrated expertise.
• Coordinate with client IT teams, developers, and vendors where required.
• Document changes, backup or rollback arrangements, and implementation results.
• Retest findings and record whether issues are resolved, partially resolved, or still open.
• Produce clear technical handover notes.

Manage

• Perform scheduled access and security-control reviews.
• Track vulnerabilities and remediation progress.
• Identify configuration drift and escalate urgent findings.
• Contribute to periodic client reports and review meetings.
• Support incident-readiness activities within the agreed scope.

What you should bring

• Demonstrable hands-on experience in security engineering, systems security, cloud security, or technical security consulting.
• Practical knowledge of identity security, endpoint protection, patching, backups, and vulnerability management.
• Strong capability in at least one relevant environment, such as Microsoft 365, Google Workspace, AWS, Azure.
• Ability to plan and implement production changes safely.
• Clear technical writing and the ability to explain business impact.
• Good judgment about your own technical limits and when specialist support is required.
• Reliable communication, documentation, and deadline management.

Relevant certifications are welcome, but practical competence matters more than collecting credentials.

How we work

• No testing without written authorisation.
• No production changes without approval.
• No unsupported findings.
• No client data in unapproved AI services.
• No issue marked resolved without appropriate verification.
• Evidence, documentation, and handover are part of delivery—not optional extras.

Engagement and payment

This is a paid contractor opportunity, not a guaranteed monthly salary.

For each engagement, we agree:

• Scope and deliverables.
• Availability .
• Project fee.
• Any separately approved expenses.

Fees are agreed before work begins. Work is assigned according to client demand, technical fit, and availability. No minimum project volume is guaranteed.

How to apply

Send the following to ravnokcompany@gmail.com :

1. Your CV or LinkedIn profile.
2. Two relevant project examples explaining your personal contribution.
3. A redacted technical report or fictional sample.
4. Your strongest platforms and technical specialisms.
5. Your availability and indicative project or day rates.

Do not submit confidential client information.

Subject: Ravnok — Security Engineer