Technology

Cybersecurity Engineer

A Cybersecurity Engineer designs, implements, and maintains security systems to protect an organization's IT infrastructure. Responsibilities include configuring firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and endpoint protection, as well as conducting security assessments and integrating security into DevOps pipelines. In Kenya, these engineers are essential for companies adopting cloud services, mobile money platforms, and remote work. The role offers strong career growth as digital transformation accelerates. Global trends like zero-trust architecture and cloud security are shaping the skill demands.

AI exposure: 40 of 100, moderate exposure
Hiring trend: Growing
Hiring rate: 80%
Minimum education: Bachelor

The role

What the work is, what it pays, and what it costs you.

At a glance

Work environment: Office or hybrid/remote, in front of a screen most of the day, with cross functional collaboration across product, design and engineering.
Remote friendly: Yes
Freelance potential: High
Freelance rate: Ksh 250,000
Time to senior: 5 years
Adaptation level: High

A day in the role

A Cybersecurity Engineer in Kenya starts by analyzing security alerts and threat intelligence. They configure firewalls, conduct vulnerability assessments on mobile money platforms, and respond to incidents to safeguard Kenya's digital infrastructure.

What it pays

Kenyan market, per month

Entry: Ksh 120,000 to Ksh 170,000

The trade offs

In its favour

Senior engineers earn 300k to 600k KES monthly, one of the highest pay bands in Kenya’s tech sector.
The role involves designing secure systems, giving you creative freedom and technical challenge that keeps work interesting.
There is a severe shortage of skilled engineers, so you have strong bargaining power and job hopping advantage.
Your work directly prevents major data breaches, making you a critical asset to the organization.

Against it

The responsibility is immense: one mistake can lead to catastrophic losses, creating constant pressure to be perfect.
The field requires deep expertise in multiple domains (network, cloud, app security) making the learning curve steep.
Local mentorship is scarce because cybersecurity is still maturing in Kenya; you may have to learn from online resources.
On-call duties are common, with late-night incident response disrupting work-life balance.

In practice

Start with a bachelor's in computer science, IT, or cybersecurity from institutions like Strathmore University or JKUAT. Entry-level roles as a SOC analyst at firms like Safaricom or KCB Bank are common; pair this with certifications like CompTIA Security+ or CEH. Many engineers first gain experience through internships at Nairobi's growing fintech startups, where they learn network monitoring and incident response.

Within 3-5 years, move from junior engineer to mid-level, earning KES 150,000–300,000 monthly. Specialize in penetration testing or cloud security to reach senior engineer roles (KES 400,000–600,000) by year 7. With a decade, you could become a CISO at a bank or lead a team of 10+ at a telco, commanding salaries above KES 800,000 plus stock options.

The Kenyan cybersecurity market is booming, driven by rapid digitisation in banking (Equity, KCB), telecom (Safaricom), and government e-services. Nairobi's Upper Hill and Westlands host top employers, with secondary hubs in Mombasa's port logistics. Growth is fuelled by the Data Protection Act 2019 and rising ransomware attacks, creating over 5,000 new jobs by 2026.

You start at 7:30 AM with a threat intelligence briefing from the team’s SIEM tools, then run vulnerability scans on the bank’s mobile app using Nessus. By 10 AM, you’re analysing a phishing attempt flagged by the SOC, and drafting an incident report. The afternoon involves a cross-department meeting to align IT hygiene with CBK regulations, followed by patching servers remotely before 5 PM.

Exposure

How much of this a machine can already do, and how that was worked out.

Where this rating sits

1,516 rated careers

lowmoderatehigh

020406080100

Rated above 46% of the 1,516 careers in the catalogue, which averages 43. Inside technology the mean is 62, across 125 careers.

What the rating is made of

Share of recorded tasks

Machine does it: 38%Software can already complete this work end to end.
Machine assists: 51%A person still decides, but the drafting is done for them.
Person does it: 11%Judgement, relationships and accountability that do not transfer.

Named task by task

Already automated

Automated patch management
Configuration auditing
Baseline monitoring and alerting
Policy enforcement checks

Still human

Designing zero-trust architectures
Integrating security into complex environments
Responding to advanced persistent threats (APTs)
Performing red-blue team exercises
Evaluating new security products

Your skills, sorted

40 skills recorded

Worth more with the tools

Programming & Coding
Machine Learning
Computer Programming
Data Analysis

Holding their value

Advanced Cryptography
Cybersecurity Leadership
Threat Intelligence and Management
Cybersecurity Governance
Incident Response and Management
Penetration Testing and Vulnerability Assessment
Secure Software Development
Artificial Intelligence in Cybersecurity

The six things it was scored on

0 to 100 each

Digital surfaceraises exposure: 100
People and inventionlowers exposure: 60
Rule bound thinkingraises exposure: 50
Regulatory stakeslowers exposure: 45
Routine intensityraises exposure: 40
Physical presencelowers exposure: 5

Task counts

Tasks recorded: 9
Automatable now: 4
Still human: 5

Displacing: Boilerplate code generation (now AI-assisted),Routine testing and refactoring,Basic data cleaning
Augmenting: AI pair-programming (Copilot),Automated code review and test generation,LLM-accelerated research and analysis
Creating: Applied AI/ML engineering,MLOps and AI reliability,AI product and data-product roles

Sources

Behind the rating

Frey & Osborne (2013), 'The Future of Employment', Oxford Martin
McKinsey Global Institute, 'The Future of Work' (2017/2023)
OpenAI/UPenn, 'GPTs are GPTs' (2023), occupational LLM exposure
WEF, 'Future of Jobs Report' (2023)

Getting in

The routes into the role and what each one asks for.

What to study

8 courses

How people get in

University Degree
4 yearsHigh cost
BSc in Cybersecurity or Computer Science from UoN, JKUAT, or Daystar
Certification Focus
1 yearMedium cost
Certifications like CompTIA Security+, CEH, or CISSP after some IT experience
Bootcamp
6 monthsMedium cost
Cybersecurity bootcamps (e.g., CyberShujaa or HackerOne community training)

Certifications

Certified Information Systems Security Professional (CISSP)
ISC²Ksh 244,8606 months
Certified Ethical Hacker (CEH)
EC-CouncilKsh 237,8604 months
CompTIA Security+
CompTIAKsh 54,8803 months

Tools of the trade

Palo Alto Firewalls
securityRequiredPaid
Snort
securityNice to haveFree
Wireshark
securityRequiredFree
Nagios
analyticsNice to haveFree
Splunk
analyticsRequiredPaid
Ansible
codeNice to haveFree
Cisco ASA
securityRequiredPaid

Who hires

Interview preparation

3 questions

Describe how you would secure an M-Pesa API gateway against man-in-the-middle attacks and data breaches in a Kenyan fintech environment.
TechnicalMid
Focus on TLS 1.3, certificate pinning, API rate limiting, and Kenya-specific compliance like the Data Protection Act (2019). Mention Safaricom's security requirements if possible.
Tell me about a time you had to convince a non-technical manager to allocate budget for a critical security upgrade. How did you handle resistance?
BehavioralMid
Emphasize communication skills, financial justification (ROI), and risk awareness. Reference Kenya's increasing cyber threats (e.g., ransomware attacks on banks in 2025).
A zero-day vulnerability is discovered in a widely used Kenyan banking app, and user data may have been exposed. You have 30 minutes to brief your CISO. What do you tell them?
SituationalSenior
Assess impact, immediate containment steps (e.g., WAF rules, patch if available), communication plan (internal + regulator like CBK), and long-term remediation. Prioritize critical assets.

Common misconceptions

Cybersecurity is only for ethical hackers
Roles include policy, compliance, and risk management, which are equally in demand.
You need a degree to enter the field
Many successful professionals start with certifications and hands-on labs; portfolios and bug bounties matter.

What happens next

How the role changes from here, and where it leads.

How the role changes

2024-2030

4 tasks can already be automated today; expect substantial reshaping by 2030. Success means moving up the value chain — from executing tasks to directing AI and applying judgement.

2024already here
AI tools begin displacing routine tasks; practitioners adopt copilots.
2026already here
Significant automation of standard sub-tasks; roles consolidate.
2028projected
Hybrid human+AI roles dominate; pure-routine work largely automated.
2030projected
The cybersecurity engineer role is reshaped around oversight, judgement and AI-fluency.

The near term

High AI-driven change through 2028 — 34% task automation, with the biggest impact on junior, routine work.

~34% of current routine tasks automated or heavily augmented by 2028
Junior/entry work consolidates; the mid-level bar rises
Fluency with GitHub Copilot becomes a hiring baseline
Pay premium widens for AI-directing practitioners
New 'human + AI' hybrid roles emerge in high fields

What to do: For this role, the window to adapt is now — 4 of your tasks are already automated or augmented. Master GitHub Copilot and Cursor, deepen Prompt engineering and LLM application development, build a portfolio that shows human + AI fluency. Practitioners who direct AI will out-earn those who don't.

Where pay is heading

2024 to 2030

20242030

Entry145kMid300kSenior610k

flat145k+8%325k+19%726k

Monthly pay in Kenyan shillings, rounded to the nearest thousand. These are projections, not observations.

Growth outlook

Net demand change: 30
Over: 2024-2030
Drivers: AI adoption across every sector,Kenya's Silicon Savannah and fintech boom
Headwinds: Commoditisation of junior coding

Supply and demand

Demand: 80
Supply pressure: 25
Balance: High demand

What to learn

Prompt engineering
LLM application development
MLOps
AI ethics & safety

Tools worth knowing

GitHub Copilot
Priority: Essential
AI pair-programming and code completion
Cursor
Priority: Essential
AI-first code editor for refactoring and feature building
Claude / ChatGPT
Priority: Essential
Design discussion, debugging, documentation
v0 by Vercel
Priority: Recommended
Rapid UI generation from prompts
Postman AI
Priority: Recommended
API testing and generation

Where people move next

5 recorded moves

Cloud Solutions Architect75%easyCloud Computing65%moderateData Science55%moderateSoftware Engineering45%moderateArtificial Intelligence Research Scientist25%very-challenging

Line length under each name is the distance of the move: shorter means more of what you already do carries over. Marked lines are steps up rather than sideways.

Data Science
Moderate55% skill overlap
Transition to data science leverages analytical and scripting skills, but requires additional training in machine learning and statistical modeling.
Software Engineering
Moderate45% skill overlap
Cybersecurity engineers have strong programming foundations; transitioning to software engineering requires deepening skills in full-stack development and software design.
Cloud Computing
Moderate65% skill overlap
Cloud computing builds on cybersecurity expertise in network and system security, with additional focus on cloud platforms like AWS or Azure.
Artificial Intelligence Research Scientist
Very challenging25% skill overlap
Becoming an AI research scientist requires deep theoretical knowledge and research skills, far beyond cybersecurity's applied focus; often requires advanced degree.
Cloud Solutions Architect
Easy75% skill overlapLateral
Cloud solutions architect leverages cybersecurity's understanding of secure systems, combined with cloud architecture skills; certifications like AWS Solutions Architect are key.

Related careers

Kenyan market notes

Critical need due to rising cyber threats in banking, mobile money, and government. Nairobi's Silicon Savannah has a severe talent shortage, driving up salaries. Certifications like CISSP and CEH are highly valued.