应用安全工程师
Application Security Engineer
Moniepoint Inc. 是非洲的一站式金融平台，每月帮助2000万家企业和个人使用无缝支付、银行、信贷、跨境和业务管理工具。
作为尼日利亚最大的商户收单机构，我们支持该国大部分的POS交易。通过我们的子公司，Moniepoint Inc. 每年处理超过2500亿美元的数字支付交易价值。
想了解什么让Moniepoint成为一个令人惊叹的工作场所吗？查看我们关于如何培养创新、团队合作和成长文化的帖子。
职位简介
我们正在寻找一位技术娴熟且经验丰富的应用安全专家加入我们的团队。理想的候选人将在通过实施和维护针对应用程序的稳健安全措施来保护我们组织的数字资产方面发挥关键作用。应用安全专家将负责识别和缓解安全漏洞，确保符合行业标准，并为应用程序的整体安全态势做出贡献。
你将负责以下工作
- 安全评估：
- 通过手动和自动化测试对应用程序进行彻底的安全评估。
- 识别并评估网页和移动应用程序中的漏洞。
安全架构：
- 与开发团队合作，将安全最佳实践整合到应用程序开发生命周期中。
- 设计并实施安全控制措施，以保护敏感数据并确保应用程序的保密性、完整性和可用性。
渗透测试：
- 对应用程序进行渗透测试，模拟现实世界中的网络攻击并识别潜在弱点。
- 提供详细的报告，包括推荐的修复策略。
事件响应：
- 在与应用程序安全相关的事件响应活动中担任关键成员。
- 与跨职能团队合作，调查并解决安全事件。
合规性：
- 确保应用程序符合相关安全标准、法规和行业最佳实践。
- 关注新兴安全威胁和行业趋势，主动应对潜在风险。
培训与意识：
- 为开发团队制定并提供安全培训计划，提高他们对安全编码实践的认识。
- 让相关方了解最新的安全漏洞和缓解措施。
查看英文原文
Who we are
Moniepoint Inc. is Africa’s all-in-one financial platform, helping 20 million businesses and individuals access seamless payments, banking, credit, cross-border, and business management tools each month.
As Nigeria’s largest merchant acquirer, we power most of the country’s point-of-sale (POS) transactions. Through our subsidiaries, Moniepoint Inc. processes over $250 billion in digital payment transaction value annually.
Curious about what makes Moniepoint an incredible place to work? Check out posts on how we cultivate a culture of innovation, teamwork, and growth.
About the role
We are seeking a highly skilled and experienced Application Security Specialist to join our dynamic team. The ideal candidate will play a crucial role in safeguarding our organization's digital assets by implementing and maintaining robust security measures for our applications. The Application Security Specialist will be responsible for identifying and mitigating security vulnerabilities, ensuring compliance with industry standards, and contributing to the overall security posture of our applications.
What you’ll get to do
- Security Assessment:
- Conduct thorough security assessments of applications through manual and automated testing.
- Identify and evaluate vulnerabilities in web and mobile applications.
Security Architecture:
- Collaborate with development teams to integrate security best practices into the application development lifecycle.
- Design and implement security controls to protect sensitive data and ensure the confidentiality, integrity, and availability of applications.
Penetration Testing:
- Perform penetration testing on applications to simulate real-world cyber-attacks and identify potential weaknesses.
- Provide detailed reports on findings, including recommended remediation strategies.
Incident Response:
- Act as a key contributor in incident response activities related to application security incidents.
- Collaborate with cross-functional teams to investigate and resolve security incidents.
Compliance:
- Ensure applications comply with relevant security standards, regulations, and industry best practices.
- Stay abreast of emerging security threats and industry trends to proactively address potential risks.
Training and Awareness:
- Develop and deliver security training programs for development teams to enhance awareness of secure coding practices.
- Keep stakeholders informed about the latest security vulnerabilities and mitigation strategies.
Security Tools:
- Manage and configure security tools for continuous monitoring and analysis of application security.
- Stay current with advancements in security technologies and integrate them into the security framework.
To succeed in this role,you should have
- Bachelor’s degree in Computer Science, Information Security, or related field.
- Proven experience as an Application Security Specialist or in a similar role.
- In-depth knowledge of application security principles, practices, and common vulnerabilities.
- Hands-on experience with security testing tools and methodologies.
- Familiarity with secure coding practices and application security frameworks.
- Strong understanding of web application architecture and cloud-based environments.
- Certifications such as OSCP, CEH, LPT, GPEN, CISSP or equivalent are a plus.
Advantage if you have;
- Analytical mindset with strong problem-solving skills.
- Excellent communication and interpersonal skills.
- Ability to work collaboratively in a team environment.
- Detail-oriented with a focus on delivering high-quality results.
- Strong knowledge of regulatory requirements related to application security.
What we can offer you
- Culture -We put our people first and prioritize the well-being of every team member. We’ve built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another. Above all, we are human.
- Learning - We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.
- Compensation - You’ll receive an attractive salary, pension, health insurance,, Employee Stock Options, annual bonus, plus other benefits.
What to expect in the hiring process
- A take home assessment
- A technical interview with a Lead in our Engineering Team
- A behavioural and technical interview with a member of the Executive team.