20 - Cybersecurity Specialist

<p>We are looking for an experienced Cybersecurity Specialist for our client, a social enterprise in the health sector operating across multiple African countries. Following a recent coordinated cyberattack, the immediate priority is to remediate residual vulnerabilities in a health application and establish a stronger, long-term security posture. This is a phased engagement - starting with urgent remediation, progressing through a full vulnerability assessment and penetration testing programme, and culminating in an ongoing biannual security retainer.</p><h3>Key Responsibilities</h3><ul> <li>Review and implement outstanding security recommendations on a compromised health application, confirm the attack vector is fully closed, and verify no backdoors or persistence mechanisms remain</li> <li>Conduct a comprehensive vulnerability assessment across all in-scope assets including the public-facing website, health application, product application, supporting APIs, backend services, and data stores</li> <li>Identify vulnerabilities across authentication and session management, injection risks, insecure data storage and transmission, access control and privilege escalation, security misconfigurations, and outdated components</li> <li>Execute internal and external penetration tests to validate exploitability of identified weaknesses and model the real-world threat landscape</li> <li>Deliver clear, structured reports including a remediation confirmation report, vulnerability assessment report, penetration test report, and a prioritized remediation roadmap</li> <li>Propose and support the establishment of an ongoing biannual security review and advisory retainer</li></ul><h3>Required Skills and Experience</h3><ul> <li>Proven hands-on experience conducting vulnerability assessments and penetration testing (both internal and external) across web and/or mobile applications</li> <li>Strong knowledge of common vulnerability domains: injection attacks, authentication weaknesses, access control flaws, insecure data handling, and security misconfigurations</li> <li>Experience assessing APIs, backend services, and supporting infrastructure</li> <li>Ability to implement security fixes directly and provide clear remediation guidance to engineering teams</li> <li>Experience in healthcare, NGO, or social enterprise environments - particularly involving sensitive health data - is a strong advantage</li> <li>Strong written communication skills: able to produce reports that are accessible to non-technical leadership while retaining sufficient technical depth for engineering partners</li></ul>