Advance Your Career as a Senior Application Security Engineer at Moniepoint Inc.

Are you a security professional passionate about protecting the digital future of Africa? Moniepoint Inc., a leading financial technology company dedicated to digitizing the real economy, is seeking a Senior Application Security Engineer to join their team. This is a pivotal role for an expert who thrives on bridging the gap between cutting-edge software development and robust, resilient security practices.

Why Join Moniepoint?

Moniepoint is building a comprehensive financial ecosystem that empowers businesses with essential payment, banking, and management tools. As a Senior Application Security Engineer, you will play a critical role in this mission by ensuring that innovation never comes at the cost of security. You will have the opportunity to work on large-scale, high-impact systems while fostering a culture of security awareness across the organization.

Key Responsibilities

Security Leadership: Define and execute security strategies that align with business goals while leading threat modeling and architectural reviews.
Technical Mastery: Perform advanced manual and automated code reviews in Java, Python, and JavaScript, while developing custom security automation tools.
Innovation & Mitigation: Tackle novel security challenges, research emerging threats, and design creative solutions for complex risks.
Cross-functional Collaboration: Partner closely with engineering teams to integrate security into CI/CD pipelines and provide mentorship to developers at all levels.

Requirements for Success

To be successful in this role, you should possess:

5+ years of experience in application security, with at least 2 years in a senior or lead capacity.
In-depth knowledge of threat modeling methodologies (STRIDE, PASTA) and secure SDLC.
Hands-on experience in cloud platforms (AWS, Azure, GCP) and container security.
Proficiency in scripting or tool development using Python or Go.
Strong communication skills, with the ability to articulate technical risks to executive stakeholders.

Certifications such as OSCP, OSCE, or GXPN, as well as contributions to open-source security projects, are highly regarded.