CEH in Nairobi
Certified Ethical Hacker — offensive security certification covering penetration testing methodologies and hacking tools.
What is CEH?
The Certified Ethical Hacker (CEH v13) is an EC-Council credential that validates your ability to think and operate like a malicious hacker — legally and systematically. Covering 20 domains including network scanning, malware threats, social engineering, and cloud security, it's one of the most recognized offensive security certifications globally. In Nairobi, where fintech firms, NGOs, telecoms, and government agencies are rapidly expanding their digital infrastructure, demand for certified ethical hackers is accelerating. Employers across Kenya's tech hub increasingly list CEH as a preferred or required qualification for security analyst, penetration tester, and SOC roles, making it a strategically smart credential for mid-career IT professionals in the region.
With the average IT salary in Nairobi sitting around $18,000 per year, a CEH certification that delivers a $15,000 annual salary uplift represents an extraordinary return on investment. At a one-time exam cost of $1,199, you could recover that spend within the first month of a post-certification role. Nairobi's cybersecurity sector is outpacing general IT hiring, driven by the growth of M-Pesa ecosystems, cloud adoption, and increasing regulatory pressure around data protection under Kenya's Data Protection Act. CEH holders are positioned to command senior-level compensation in a market where certified offensive security talent remains scarce, giving early movers a significant and lasting competitive advantage.
Exam details
Prerequisites: 2 years IT security experience or EC-Council official training
12-week study plan
Exam tips
CEH v13 tests tool recognition heavily — know what Nmap, Metasploit, Nikto, Burp Suite, and Wireshark are used for and in which phases of the ethical hacking cycle they appear
EC-Council expects you to select the 'most ethical' or 'most methodical' answer — when two options seem correct, always pick the one that follows formal hacking phase sequence or requires explicit written permission
The exam includes scenario-based questions tied to the new AI-assisted attack content in v13; don't skip the cloud hacking and IoT modules assuming they're low-weight
Memorize the five phases of ethical hacking — reconnaissance, scanning, gaining access, maintaining access, clearing tracks — as the exam repeatedly maps tools and techniques to these phases
Practice with CEH-specific question banks rather than generic Security+ or OSCP-style material; EC-Council's question style is definition-heavy and tool-specific, not purely conceptual