Technology

Cyber Security Analyst

A Cyber Security Analyst is a professional responsible for protecting an organization's computer systems, networks, and data from cyber threats. Their core purpose is to safeguard digital assets by identifying vulnerabilities, detecting intrusions, and responding to security incidents. In Kenya, this role has become critical due to the rapid digitization of financial services, with mobile money platforms like M-Pesa and banking apps becoming prime targets for cybercriminals.

Key responsibilities include monitoring security systems for suspicious activity, conducting vulnerability assessments, implementing security measures such as firewalls and encryption, and leading incident response efforts. Daily work involves analyzing logs, performing penetration tests, and collaborating with IT teams to patch weaknesses. The field is evolving with AI-driven security tools, but human expertise remains essential for complex threat hunting and strategic risk management.

Career growth in Kenya is promising, with demand surging across sectors like banking, telecoms, and e-commerce. Salaries for entry-level analysts range from KES 600,000 to 1,200,000 annually, while senior roles can exceed KES 3,000,000. The Kenya National Bureau of Statistics projects a 25% increase in cybersecurity jobs by 2028, driven by regulatory frameworks like the Data Protection Act and rising cybercrime. Continuous learning in areas like cloud security and AI is key to long-term advancement.

AI exposure: 26 of 100, low exposure
Hiring trend: Growing
Hiring rate: 85%
Minimum education: Bachelor

The role

What the work is, what it pays, and what it costs you.

At a glance

Work environment: Office or hybrid/remote, in front of a screen most of the day, with cross functional collaboration across product, design and engineering.
Remote friendly: Yes
Freelance potential: Medium
Freelance rate: Ksh 200,000
Time to senior: 7 years
Adaptation level: High

A day in the role

You start by checking SIEM alerts from overnight threats, then investigate a phishing attempt targeting a Kenyan bank. Midday, you run vulnerability scans on the company's cloud infrastructure and patch critical findings. In the afternoon, you draft an incident report and train staff on new password policies.

What it pays

Kenyan market, per month

Entry: Ksh 90,000 to Ksh 127,500

The trade offs

In its favour

Salaries are high due to critical need, with experienced analysts earning over KES 1.2M annually, often with premium bonuses.
Demand is surging as cyber threats grow, making this one of the most stable tech careers in Kenya.
You play a crucial role protecting sensitive data and infrastructure, giving a strong sense of purpose.
The field offers diverse paths (penetration testing, SOC, forensics) so you can pivot without starting over.

Against it

Constant vigilance and incident response can lead to burnout; you may need to work evenings or weekends during attacks.
You must continuously learn new tools and threats; certifications (CISSP, CEH) are required but costly.
High stress from responsibility and the potential blame if a breach occurs, especially in under-staffed teams.

In practice

Begin with a bachelor's in computer science, IT, or cybersecurity from a recognized Kenyan university like Strathmore or the University of Nairobi. Certifications such as CompTIA Security+ or CEH are highly valued and can be obtained through local training providers like 3MTT or iHub. Entry-level roles often start as a security operations center (SOC) analyst at firms like Safaricom or Serianu, where you monitor networks and respond to incidents. Bootcamps and short courses from the ICT Authority or Strathmore’s @iLabAfrica can also fast-track entry.

After 2–3 years, you can move to a senior analyst or team lead, earning KSh 200K–350K monthly. With 5–7 years and certifications like CISSP or CISM, you can become a security manager or consultant, making KSh 500K+. Specialization paths include penetration testing, cloud security, or governance. In 10 years, you might become a Chief Information Security Officer (CISO) at a bank like KCB or an insurance firm, with total comp exceeding KSh 1.5M per month.

The Kenyan cybersecurity market is growing fast, driven by the Data Protection Act (2019) and digital financial services. Key sectors include banking (KCB, Equity), telecoms (Safaricom, Airtel), and government agencies (ICT Authority, CBK). Nairobi is the hub, with firms like Serianu, 4Christ, and Dimension Data leading demand. Incident response and compliance roles are in high supply, and the market is expected to grow by 15% annually through 2026.

A mid-level cybersecurity analyst at Safaricom starts the day reviewing alerts from Splunk and the SOC dashboard, triaging any overnight incidents. By 10 AM, they join a stand-up to discuss ongoing threats, then work on a vulnerability assessment for a new mobile money service. After lunch, they prepare a report for the CISO on phishing trends and update firewall rules. The day closes with a handover to the night shift team, ensuring 24/7 monitoring of Nairobi’s telecom network.

Exposure

How much of this a machine can already do, and how that was worked out.

Where this rating sits

1,516 rated careers

lowmoderatehigh

020406080100

Rated above 21% of the 1,516 careers in the catalogue, which averages 43. Inside technology the mean is 62, across 125 careers.

What the rating is made of

Share of recorded tasks

Machine does it: 38%Software can already complete this work end to end.
Machine assists: 51%A person still decides, but the drafting is done for them.
Person does it: 11%Judgement, relationships and accountability that do not transfer.

Named task by task

Already automated

Automated threat detection from logs
Phishing email identification
Malware analysis signature matching
Alert triaging and prioritization
Routine vulnerability scanning

Still human

Developing and updating security policies
Conducting employee security awareness training
Performing complex incident investigations and root cause analysis
Designing security architecture for new systems
Communicating risks to non-technical stakeholders
Participating in red team/blue team exercises

Your skills, sorted

31 skills recorded

Worth more with the tools

Programming & Coding
Machine Learning
Data Analysis

Holding their value

DevOps
Cloud Computing
Computer Networks
Network Security
Network Security Fundamentals
Ethical Hacking and Penetration Testing
Cryptography and Data Protection
Security Policies and Compliance

The six things it was scored on

0 to 100 each

Digital surfaceraises exposure: 100
People and inventionlowers exposure: 60
Rule bound thinkingraises exposure: 50
Regulatory stakeslowers exposure: 45
Routine intensityraises exposure: 40
Physical presencelowers exposure: 5

Task counts

Tasks recorded: 11
Automatable now: 5
Still human: 6

Displacing: Boilerplate code generation (now AI-assisted),Routine testing and refactoring,Basic data cleaning
Augmenting: AI pair-programming (Copilot),Automated code review and test generation,LLM-accelerated research and analysis
Creating: Applied AI/ML engineering,MLOps and AI reliability,AI product and data-product roles

Sources

Behind the rating

Frey & Osborne (2013), 'The Future of Employment', Oxford Martin
McKinsey Global Institute, 'The Future of Work' (2017/2023)
OpenAI/UPenn, 'GPTs are GPTs' (2023), occupational LLM exposure
WEF, 'Future of Jobs Report' (2023)

Getting in

The routes into the role and what each one asks for.

What to study

8 courses

How people get in

University Degree + Certs
4 yearsHigh cost
BSc in IT or Cybersecurity plus CEH or CompTIA Security+
Bootcamp
6 monthsMedium cost
Cyber security bootcamp from Moringa or similar
Self-Study + Bug Bounty
1-2 yearsLow cost
Online courses (Coursera, Udemy) and bug bounty experience

Certifications

CISSP
ISC²Ksh 100,00018 monthsRequired
Certified Ethical Hacker (CEH)
EC-CouncilKsh 120,0006 months
CompTIA Security+
CompTIAKsh 35,0004 months
CISM
ISACAKsh 100,00012 months

Tools of the trade

Burp Suite
securityNice to havePaid
IBM QRadar
securityNice to havePaid
Kali Linux
securityNice to haveFree
Metasploit
securityNice to haveFree
Nmap
securityRequiredFree
Snort
securityNice to haveFree
Wireshark
securityRequiredFree
Splunk
securityRequiredPaid
Nessus
securityRequiredPaid

Who hires

Interview preparation

3 questions

Describe how you would implement a zero-trust architecture for a Nairobi-based fintech company experiencing rapid growth, considering local data protection laws like the Data Protection Act 2019 and the prevalence of mobile money platforms like M-Pesa.
TechnicalMid
Focus on integration of MFA, least-privilege access, micro-segmentation, and continuous monitoring tailored to Kenya's mobile-first economy. Discuss use of open-source tools due to budget constraints in many Kenyan SMEs.
Tell me about a time you had to convince management to invest in a cybersecurity tool or training. How did you justify the cost, and what was the outcome?
BehavioralMid
Highlight the need to translate technical risks into business impact common in Kenyan organizations, referencing incidents like the 2022 Kenya Power ransomware attack to build a case.
A critical software update for your company's core banking system requires downtime during business hours. The head of operations refuses, citing loss of transactions. How do you handle this?
SituationalMid
Demonstrate risk communication skills, propose a phased update or after-hours work, and emphasize regulatory compliance with CBK guidelines on systems uptime and security.

Common misconceptions

Only government jobs available
Private sector, especially banks and fintech, hires heavily for security roles.
Requires years of experience
Junior analysts with certs can start at KES 80,000/month and grow quickly.

What happens next

How the role changes from here, and where it leads.

How the role changes

2024-2030

5 tasks can already be automated today; expect substantial reshaping by 2030. Success means moving up the value chain — from executing tasks to directing AI and applying judgement.

2024already here
AI tools begin displacing routine tasks; practitioners adopt copilots.
2026already here
Significant automation of standard sub-tasks; roles consolidate.
2028projected
Hybrid human+AI roles dominate; pure-routine work largely automated.
2030projected
The cyber security analyst role is reshaped around oversight, judgement and AI-fluency.

The near term

High AI-driven change through 2028 — 34% task automation, with the biggest impact on junior, routine work.

~34% of current routine tasks automated or heavily augmented by 2028
Junior/entry work consolidates; the mid-level bar rises
Fluency with GitHub Copilot becomes a hiring baseline
Pay premium widens for AI-directing practitioners
New 'human + AI' hybrid roles emerge in high fields

What to do: For this role, the window to adapt is now — 5 of your tasks are already automated or augmented. Master GitHub Copilot and Cursor, deepen Prompt engineering and LLM application development, build a portfolio that shows human + AI fluency. Practitioners who direct AI will out-earn those who don't.

Where pay is heading

2024 to 2030

20242030

Entry109kMid225kSenior458k

flat109k+8%243k+19%545k

Monthly pay in Kenyan shillings, rounded to the nearest thousand. These are projections, not observations.

Growth outlook

Net demand change: 30
Over: 2024-2030
Drivers: AI adoption across every sector,Kenya's Silicon Savannah and fintech boom
Headwinds: Commoditisation of junior coding

Supply and demand

Demand: 85
Supply pressure: 23
Balance: High demand

What to learn

Prompt engineering
LLM application development
MLOps
AI ethics & safety

Tools worth knowing

GitHub Copilot
Priority: Essential
AI pair-programming and code completion
Cursor
Priority: Essential
AI-first code editor for refactoring and feature building
Claude / ChatGPT
Priority: Essential
Design discussion, debugging, documentation
v0 by Vercel
Priority: Recommended
Rapid UI generation from prompts
Postman AI
Priority: Recommended
API testing and generation

Where people move next

5 recorded moves

Data Science50%moderateCloud Solutions Architect50%moderateCloud Computing45%moderateSoftware Engineering35%challengingArtificial Intelligence Research Scientist20%very-challenging

Line length under each name is the distance of the move: shorter means more of what you already do carries over. Marked lines are steps up rather than sideways.

Data Science
Moderate50% skill overlapLateral
Leverage analytical skills from cybersecurity to move into data science; requires building statistical and machine learning expertise.
Software Engineering
Challenging35% skill overlap
Transition to software engineering requires strong coding skills; cybersecurity experience provides a foundation in secure coding but needs full-stack development knowledge.
Cloud Computing
Moderate45% skill overlapLateral
Cybersecurity analysts often have cloud security knowledge; moving into general cloud computing is a natural shift with focused certification.
Artificial Intelligence Research Scientist
Very challenging20% skill overlapPromotion
A radical career shift requiring advanced degrees in AI/ML; cybersecurity background provides problem-solving skills but deep theoretical knowledge is essential.
Cloud Solutions Architect
Moderate50% skill overlapPromotion
Cybersecurity expertise in cloud environments is highly valuable; transitioning to cloud architect involves broadening infrastructure and design skills.

Related careers

Kenyan market notes

Growing demand due to increased digital threats, especially in banking and fintech. Certifications like CEH, CISSP are highly valued. Nairobi is the main hub but remote opportunities exist.