Information Security Engineer at Yas Tanzania

Company: Yas

Job Summary

Yas is seeking an experienced Information Security Engineer to design, implement, and maintain enterprise security technologies across on-premises, cloud, and hybrid environments. The successful candidate will be responsible for strengthening the organization's cybersecurity posture, managing security infrastructure, responding to security incidents, and ensuring compliance with industry security standards and best practices.

Core Responsibilities

• Design, implement, configure, and maintain information security technologies and controls across on-premises, cloud, and hybrid environments.
• Administer and optimize enterprise security solutions, including:
  • Firewalls
  • Web Application Firewalls (WAF)
  • Intrusion Detection and Prevention Systems (IDS/IPS)
  • Security Information and Event Management (SIEM)
  • Endpoint Detection and Response (EDR/XDR)
  • Identity and Access Management (IAM)
  • Privileged Access Management (PAM)
  • Data Loss Prevention (DLP)
  • Virtual Private Networks (VPN)
  • Encryption solutions
  • Email security solutions
• Monitor security events, investigate and respond to security incidents, and support digital forensic investigations and recovery activities.
• Perform vulnerability assessments, coordinate penetration testing, manage security patching, and ensure timely remediation of identified vulnerabilities.
• Manage identity and access security, including user provisioning, privileged access management, multi-factor authentication (MFA), and periodic access reviews.
• Secure cloud infrastructure and services by implementing cloud security controls, monitoring cloud configurations, and supporting cloud security posture management.

Qualifications

• Bachelor's degree in:
  • Information Security
  • Cyber Security
  • Computer Science
  • Computer Engineering
  • Or a related field.
• Experience in the telecommunications industry is an added advantage.
• Minimum of 3–5 years of experience in Information Security, Cybersecurity, or IT Security Engineering.
• Hands-on experience with enterprise security technologies, including:
  • Firewalls
  • WAF
  • IDS/IPS
  • SIEM
  • EDR/XDR
  • IAM/PAM
  • DLP
  • VPN
  • Encryption solutions

Core Competencies

• Knowledge of:
  • ISO/IEC 27001
  • NIST Cybersecurity Framework
  • CIS Controls
  • OWASP
• Identity and Access Management (IAM/PAM).
• Secure Software Development Lifecycle (SDLC/DevSecOps).
• Strong analytical and problem-solving skills.
• Customer and business focus.

Equal Opportunity Statement

Yas is committed to equal employment opportunities and unbiased treatment of all individuals in all employment practices.

Only shortlisted applicants will be contacted.

How to Apply

If this opportunity matches your qualifications and career aspirations, submit your application before 05 August 2026