Irembo is a technology company that designs and develops digital products to ease the accessibility of services in users’ everyday lives worldwide, starting with Rwanda. Our pioneer products, IremboGov and IremboPay, have enabled Rwandan citizens and foreigners to access and pay for over 150 public services online through our one-stop-shop e-governance and payment platforms. To date, we have facilitated over 30 million transactions through our platforms and have ambitious goals to scale our technology worldwide to enable more governments and institutions to serve their citizens better. More information is available on irembo.com.

Project Title: Security Monitoring and Response

Project Description

As a Security Operations Centre (SOC) Intern, you will support the Security & Privacy Team in defending the organization against cyber threats. This role is essential to our zero trust, workstation security, and threat intelligence initiatives. You will assist in access and asset management, monitoring alerts on our security tools, analyzing threat data, and responding to incidents. 

The Scope of Work

• Review SIEM alerts, logs, and audit trails to identify security incidents, especially those involving endpoint and access-related threats.
• Analyze threat intelligence feeds, alerts, and advisories to identify indicators of compromise (IOCs) and emerging threat patterns.
• Contribute to threat hunting activities and correlate internal monitoring data with external threat intelligence.

• Respond to and support investigations for security incidents following our internal SOC analyst playbooks.
• Improve and maintain the inventory of authorized and unauthorized devices.
• Support managing device compliance and ensure alignment with security policies.
• Assist in the management of user access controls and ensure compliance with security policies.
• Stay updated on the latest cybersecurity trends, threats, and technologies through continuous learning and professional development activities.

The Required Skills

• Completed or currently in the final year of an undergraduate degree in Cybersecurity, Computer Science, or a related field.
• An understanding of cybersecurity principles, threats, and mitigation strategies (e.g., threat modelling, IDS/IPS, firewall implementation, risk assessments, etc.).
• Experience with SIEM tools. Preferably Splunk, Elastic Security.
• Experience with anti-virus/EDR solutions and endpoint hardening practices.
• Basic knowledge of threat intelligence tools, sources (eg open source-feeds or commercial platforms), and common IOCs (hashes, IPs, domains).
• Experience in securing different operating systems (macOS, Windows & Linux).

• Experience with identity and access management systems (e.g., Active Directory, Okta, Azure AD, etc.). Good development or scripting experience and skills. Java, Python, Ruby, Ruby on Rails, JavaScript, and/or Go are preferred.
• Understanding of network and web-related protocols (such as TCP/IP, UDP, HTTP, and HTTPS protocols).
• Good communication and teamwork skills.
• Ability to learn quickly and adapt in a fast-paced environment.

The Key Deliverables

• Detailed SOC reports summarizing reviewed alerts, including categorizations(false positives) threat severity and any escalated incidents.
• Documentation of steps and findings taken during investigations, threat hunting activities.
• A comprehensive inventory of all authorized and unauthorized devices on the network (kept up to date).
• Compliance reports highlighting non-compliant devices or systems and actions taken to mitigate associated risks.
• Regular updates to the list of log sources integrated into SIEM (firewalls, EDR, authentication systems, etc).
• Contributions to access control review reports, identifying inactive, over-privileged, or misconfigured accounts.

Location

• Nyarutarama, Kigali, Rwanda.

Application Deadline

• August 21, 2025

We are an equal opportunity employer and are committed to providing a positive interview experience for every candidate. We're on a mission to change our continent through technology and are committed to a diverse and inclusive workplace and strongly encourage applicants from all backgrounds, nationalities, and walks of life.

Our head office is based in Kigali, Rwanda.