20 - Cybersecurity Specialist

We are looking for an experienced Cybersecurity Specialist for our client, a social enterprise in the health sector operating across multiple African countries. Following a recent coordinated cyberattack, the immediate priority is to remediate residual vulnerabilities in a health application and establish a stronger, long-term security posture. This is a phased engagement - starting with urgent remediation, progressing through a full vulnerability assessment and penetration testing programme, and culminating in an ongoing biannual security retainer.

Key Responsibilities

Review and implement outstanding security recommendations on a compromised health application, confirm the attack vector is fully closed, and verify no backdoors or persistence mechanisms remain
Conduct a comprehensive vulnerability assessment across all in-scope assets including the public-facing website, health application, product application, supporting APIs, backend services, and data stores
Identify vulnerabilities across authentication and session management, injection risks, insecure data storage and transmission, access control and privilege escalation, security misconfigurations, and outdated components
Execute internal and external penetration tests to validate exploitability of identified weaknesses and model the real-world threat landscape
Deliver clear, structured reports including a remediation confirmation report, vulnerability assessment report, penetration test report, and a prioritized remediation roadmap
Propose and support the establishment of an ongoing biannual security review and advisory retainer
Required Skills and Experience
Proven hands-on experience conducting vulnerability assessments and penetration testing (both internal and external) across web and/or mobile applications
Strong knowledge of common vulnerability domains: injection attacks, authentication weaknesses, access control flaws, insecure data handling, and security misconfigurations
Experience assessing APIs, backend services, and supporting infrastructure
Ability to implement security fixes directly and provide clear remediation guidance to engineering teams
Experience in healthcare, NGO, or social enterprise environments - particularly involving sensitive health data - is a strong advantage
Strong written communication skills: able to produce reports that are accessible to non-technical leadership while retaining sufficient technical depth for engineering partners