Posted: 2026-09-15 23:29:31  Deadline: October 15, 2026   Full-time   Salary: Confidential

Code for Africa (CfA) is inviting applications from qualified candidates for the position of Digital Security Engineer. The successful candidate will join TrustLab, CfA's nonprofit digital security lab, and will lead technical incident response, security assessments, endpoint security, and digital security support for human rights defenders, journalists, civil society organisations and other stakeholders across Africa.

Position Details

Position: Digital Security Engineer.
Employer: Code for Africa (CfA).
Programme: TechLab.
Team: TrustLab.
Employment Type: Full-time.
Location: Remote.
Timezone: GMT-1 to GMT+5.
Languages: English and French.
Nice to have: Arabic or Portuguese.

Key Responsibilities

Conduct comprehensive security assessments of mobile and end-user computing devices.
Monitor SIEM dashboards to triage alerts for signs of compromise and conduct forensic investigations.
Securely extract relevant forensic data and wipe or reset compromised devices.
Develop incident response plans, playbooks and simulations.
Design and maintain secure device configurations, hardening and usage best practices.
Test devices, applications and software for vulnerabilities before and after deployment and coordinate patch management.
Monitor emerging security threats and vulnerabilities and proactively implement countermeasures.
Manage access to security tools such as VPN and Password Manager.
Provide timely support to staff on access, network and device-related issues.
Collaborate with the security team and other stakeholders to strengthen organisational and community security and resilience.

Required Qualifications

Bachelor's degree in Information Technology, Computer Science, Computer Engineering, Cybersecurity or similar technology degree, or equivalent technology experience.
Demonstrable experience supporting high-risk users such as journalists and activists.
At least 3 years of experience in security engineering or a similar role, with a strong focus on incident response, endpoint security and application security.
Experience with endpoint security tools and techniques such as Mobile Device Management and anti-malware.
Hands-on experience investigating and responding to security incidents, including triage, forensic analysis, evidence preservation, containment, recovery and post-incident review.
Experience using SIEM, EDR or comparable security tools where appropriate.
Experience conducting risk-based security assessments using secure configuration review, vulnerability assessment, threat modelling or authorised penetration testing.
Experience translating security findings into practical and prioritised remediation.
Experience with identity and access management such as MFA, SSO, least-privilege provisioning and deprovisioning.
Experience with scripting languages for security automation, including Python and shell scripting.
Deep practical knowledge of macOS and iOS, including secure configuration, endpoint management, incident investigation and relevant security tooling.
Ability to assess and support mixed-device environments.
Passion for using technology to empower and protect civil society organisations.
Strong organisational skills and ability to manage multiple priorities and tasks and deliver results within deadlines.
Excellent technical documentation and presentation skills.
Proven ability to work and communicate with technical and non-technical stakeholders.

Preferred Qualifications

Master's degree in Cybersecurity, Information Security or similar technology postgraduate degree.
Expertise in Penetration Testing, Cloud Security or Cryptography.
Familiarity with security risks involving generative AI or agentic systems and responsible, privacy-preserving use of AI-assisted tools in security workflows.
Working knowledge of Windows, Linux and Android, including secure configuration, common security controls and relevant investigation tooling.
Relevant security certifications such as eJPT, Security+, GCIH, CySA+ or OSCP.
Extensive knowledge of digital security issues and threat vectors in the African context.
Experience working with nonprofit organisations or in the development sector.
Experience working in a fully remote environment.

Language and Location Requirements

Remote work arrangement.
Candidates must be able to maintain at least four hours of overlap with the team's core collaboration hours of 09:00 to 17:00 GMT+1.
Candidates must be within the GMT-1 to GMT+5 timezone range.
Fluency in English and French is required.
Fluency in Arabic or Portuguese is an advantage.

About the Role

The successful candidate will join TrustLab, the security team within CfA's TechLab programme. The role will involve safeguarding civil society organisations, community-based organisations, partners and other stakeholders across Africa through security assessments, incident investigations and implementation of security best practices.

Projects

TrustLab, including toolkit development and the Digital Security Helpline.
First-line security tools including Outline, FeedShield and Vaultwarden.
Open source intelligence tools and teams including afriLEAKS and investigate.AFRICA.
Knowledge and community outreach initiatives including academyAFRICA and WanaDATA.

What Code for Africa Offers

Competitive salary subject to experience, with opportunities for performance-based growth in career path and public stature.
Medical insurance cover through a remote-first provider.
Dynamic workplace with a transnational team, occasional international travel and generous vacation benefits.
Ongoing opportunities to learn new skills, techniques and technologies.
Opportunity to write for international audiences and interact with colleagues around the world.

Application Process

Interested and qualified candidates should complete the application form on or before October 15, 2026.

Application Form: Digital Security Engineer at Code for Africa (CfA) (Application Form)

More details: Digital Security Engineer at Code for Africa (CfA) (Full Job Description)

About Code for Africa

Code for Africa (CfA) is the continent's largest network of indigenous African civic technology and investigative data journalism laboratories, with over 100 staff in 21 countries. CfA builds digital democracy solutions that provide citizens with access to actionable information and strengthen civic engagement, public governance and accountability.

CfA also builds and supports initiatives including open.AFRICA, commons.AFRICA, source.AFRICA, africanDRONE, PesaCheck, sensors.AFRICA and the African Network of Centres for Investigative Reporting (ANCIR).

Code for Africa is an equal opportunity workplace and an affirmative action employer. Candidates with a disability or special need requiring accommodation are encouraged to communicate their requirements.