Senior Application Security Engineer

As a Senior Security Engineer at Moniepoint, you will integrate security into the software development lifecycle, partnering with engineering teams to ensure secure design through threat modeling and code review. You will drive efficiency via security automation and mentor developers to enhance the overall security posture. This role requires a technical leader with deep security expertise, capable of translating complex risks into actionable insights and guiding the implementation of resilient, secure solutions.

Must Have

• Define and execute security strategy for product teams, aligning with business objectives.
• Lead threat modeling, security architecture reviews, and design guidance for diverse software projects.
• Conduct adversarial security analysis using automated tools and manual techniques.
• Perform manual/automated secure code reviews across Java, Python, JavaScript, and cloud-native stacks.
• Develop security automation tools to scale vulnerability detection (SAST/DAST/IAST enhancements).
• Identify complex risks through offensive security research; advocate for cutting-edge mitigation technologies.
• Solve novel security problems lacking predefined solutions.
• Partner with the engineering team to embed security controls into CI/CD pipelines and development practices.
• Lead incident response for application security events and drive root-cause analysis.
• 5+ years in application security, including 2+ years in a senior/lead role.
• Expertise in threat modeling, penetration testing, and secure SDLC implementation.
• Proficiency in code review for Java/Python/JavaScript and cloud platforms (AWS/Azure/GCP).
• Hands-on experience building security tools with Python/Go.
• Proven track record in security architecture design and risk-based decision-making.

Good to Have

• OSCP, OSCE, GXPN, or similar offensive security certifications.
• Contributions to security tooling/open-source projects.
• Experience with container security (Kubernetes, Docker), serverless, or infrastructure-as-code.

Perks & Benefits

• Culture that puts people first and prioritizes well-being, fostering innovation, teamwork, and growth.
• Learning and development-focused environment with knowledge sharing, training, and regular internal technical talks.
• Attractive salary.
• Pension.
• Health insurance.
• Employee Stock Options.
• Annual bonus.

Who we are

Moniepoint Inc. is Africa’s all-in-one financial ecosystem, helping 10 million businesses and individuals access seamless payments, banking, credit, and business management tools since 2019.

As Nigeria’s largest merchant acquirer, it powers most of the country’s Point of Sale (POS) transactions. Through its subsidiaries, Moniepoint Inc. processes $22 billion monthly for its customers while operating profitably.

Curious about what makes Moniepoint an incredible place to work? Check out posts on how we cultivate a culture of innovation, teamwork, and growth._

About the role

As a Senior Security Engineer, you will champion secure innovation by embedding security into the fabric of our software development lifecycle. You'll partner closely with engineering teams to safeguard customer trust while they build cutting-edge services. Your expertise will directly shape secure design through threat modeling and code review, drive efficiency via security automation, and mentor developers to elevate our collective security posture.

The ideal candidate is a technical leader who blends deep security expertise with exceptional influence. You possess broad security knowledge anchored by specialization in critical areas, and excel at translating complex risks into actionable insights for both engineers and executives. Your strength lies in harmonizing diverse perspectives, strategically prioritizing risks, and guiding partners to implement resilient, secure solutions that balance speed and safety.

Key Responsibilities

Security Strategy & Leadership

• Define and execute security strategy for product teams, aligning with business objectives.
• Lead threat modeling, security architecture reviews, and design guidance for diverse software projects.
• Mentor engineers technically and professionally, fostering a culture of security excellence.

Advanced Technical Execution

• Conduct adversarial security analysis using automated tools and manual techniques (e.g., custom exploit development).

• Perform manual/automated secure code reviews across Java, Python, JavaScript, and cloud-native stacks.
• Develop security automation tools to scale vulnerability detection (SAST/DAST/IAST enhancements).

Risk Mitigation & Innovation

• Identify complex risks through offensive security research; advocate for cutting-edge mitigation technologies.
• Solve novel security problems lacking predefined solutions (e.g., zero-day vulnerabilities, emergent attack vectors).
• Maintain and evolve threat models for critical applications and microservices architectures.

Collaboration & Enablement

• Partner with the engineering team to embed security controls into CI/CD pipelines and development practices.
• Design/deliver security training programs tailored to development teams and business stakeholders.
• Lead incident response for application security events and drive root-cause analysis.

Qualifications Required

• 5+ years in application security, including 2+ years in a senior/lead role.
• Expertise in threat modeling (e.g., STRIDE, PASTA), penetration testing, and secure SDLC implementation.Proficiency in code review for Java/Python/JavaScript and cloud platforms (AWS/Azure/GCP).
• Hands-on experience building security tools (e.g., scanners, CI plugins) with Python/Go.
• Proven track record in security architecture design and risk-based decision-making.

Preferred

• OSCP, OSCE, GXPN, or similar offensive security certifications.
• Contributions to security tooling/open-source projects.
• Experience with container security (Kubernetes, Docker), serverless, or infrastructure-as-code.

Skills

• Leadership: Ability to define team strategy, mentor engineers, and influence stakeholders.
• Innovation: Aptitude for researching/implementing novel solutions to ambiguous security challenges.
• Technical Depth: Mastery of application security frameworks (OWASP, NIST) and exploit techniques.
• Communication: Translate technical risks to business impact for executives and engineers alike.
• Execution: Drive implementation of security controls

What we can offer you

• Culture -We put our people first and prioritize the well-being of every team member. We’ve built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another. Above all, we are human.
• Learning - We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.
• Compensation - You’ll receive an attractive salary, pension, health insurance,, Employee Stock Options, annual bonus, plus other benefits.