Security Analyst Intern

Jubilee Insurance was established in August 1937, as the first locally incorporated Insurance Company based in Mombasa. Jubilee Insurance has spread its sphere of influence throughout the region to become the largest Composite insurer in East Africa, handling Life, Pensions, Asset Management and Medical Insurance. Today, Jubilee is the number one insurer in East Africa with over 1.9 million clients. Jubilee Insurance has a network of offices in Kenya, Uganda, Tanzania, Burundi, and Mauritius. It is the only ISO certified insurance group listed on the three East Africa stock exchanges – The Nairobi Securities Exchange (NSE), Dar es Salaam Stock Exchange and Uganda Securities Exchange. Its regional offices are highly rated on leadership, quality and risk management and have been awarded an AA- in Kenya and Uganda, and an A+ in Tanzania. For more information, visit www.JubileeInsurance.com.

We currently have an exciting career opportunity for a Security Analyst Intern (2) within Jubilee Life Insurance Limited. The position holder will report to the SOC Team Lead and will be based at our Head Office in Nairobi.

Role Purpose

The Security Analyst Intern, under the supervision of the SOC Team Lead, will support the Cyber Security team in implementing security strategies, assisting with Security Operations Center (SOC) activities, and contributing to compliance efforts. This role provides hands-on experience in a SOC environment while aligning with Jubilee Insurance’s People and Culture pillar to foster learning, collaboration, and inclusivity, promoting professional growth and a securityconscious culture.

Main Responsibilities

1. Participate in security awareness initiatives that promote inclusivity and employee engagement, in line with People and Culture principles.
2. Assist in monitoring and analysing security alerts, incidents, and events within the SOC under supervision.
3. Support the delivery of security awareness training to employees, fostering a collaborative and security-conscious culture.
4. Contribute to reviews of SOC processes, workflows, and tools to ensure alignment with industry best practices.
5. Aid in incident response activities, including documentation and support for containment, eradication, and recovery efforts.
6. Monitor security infrastructure and SIEM platforms with guidance to identify potential issues or gaps.
7. Assist in conducting vulnerability scans across IT infrastructure and documenting findings.
8. Support user provisioning, de-provisioning, and access reviews to maintain secure access controls.
9. Help implement Role-Based Access Control (RBAC) and least privilege principles under supervision.
10. Maintain comprehensive documentation, records, and reports on SOC activities, incident response procedures, and compliance efforts for internal and external stakeholders.
11. Support internal teams with security-related guidance, promoting a culture of security awareness and compliance.

People and Culture Responsibilities

1. Engage in an inclusive team environment, supporting Jubilee Insurance’s commitment to diversity, equity, and inclusion.
2. Actively participate in professional development opportunities, including mentorship and training, to enhance skills and knowledge.
3. Promote open communication and collaboration within the team, contributing to a positive and supportive work culture.
4. Align with organizational values of integrity, respect, and innovation through active participation in team initiatives.

Qualifications

1. Bachelor’s Degree program in Computer Science, Information Technology, or a related field at a recognized university.
2. Basic understanding of information security concepts (certifications such as Security+ or equivalent coursework preferred but not mandatory).
3. Familiarity with networking concepts (e.g., coursework or certifications like CCNA beneficial but not required).
4. Interest in IT service management (e.g., exposure to ITIL principles advantageous).
5. Basic knowledge of cloud technologies (e.g., AWS, Azure) through coursework or self-study.

Relevant Experience

1. Exposure to cybersecurity concepts through academic projects, coursework, or self-study.
2. Basic familiarity with SIEM tools, intrusion detection systems, or security analytics platforms through labs or simulations.
3. Interest in incident response and vulnerability management, demonstrated through relevant coursework or personal projects.
4. Experience in team-based projects or internships that emphasize collaboration and learning.