IT Security Engineer at Renmoney


Renmoney

Renmoney – We are a passionate team determined to challenge the status quo and make financial inclusion count for the millions of under-banked individuals and small business owners in Nigeria. We provide loans, savings, and fixed deposit solutions to our customers. Our vision is to be the most convenient lending company, delivering outstanding service experiences.

We are recruiting to fill the position below:

Job Title: IT Security Engineer

Location: Ikoyi, Lagos
Job Type: Full Time

Description
Security Infrastructure Design and Implementation:

  • Design and implement security measures and controls to protect information systems and networks.
  • Deploy and manage security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and encryption solutions.

Application Security:

  • Conduct thorough security assessments and code reviews to identify and mitigate vulnerabilities in Renmoney’s applications.
  • Integrate security best practices into the software development lifecycle (SDLC) to ensure secure application architectures.
  • Collaborate with architects and engineers to design secure system architectures.
  • Ensure security is integrated into the system development lifecycle (SDLC).

Security Monitoring and Incident Response:

  • Monitor security systems and analyze security logs to detect and respond to security incidents.
  • Conduct incident response activities, including investigation, containment, eradication, and recovery.

Vulnerability Management:

  • Conduct regular vulnerability assessments and penetration testing to identify security weaknesses.
  • Work with IT and development teams to remediate vulnerabilities and improve security posture.

Security Policies and Compliance:

  • Develop, implement, and enforce security policies, standards, and procedures.
  • Ensure compliance with relevant security regulations and frameworks (e.g., ISO 27001, PCI DSS, CBN Cybersecurity Framework).

Security Awareness and Training:

  • Provide security awareness training and guidance to employees and stakeholders.
  • Promote a culture of security awareness within the organization.

Risk Assessment and Management:

  • Conduct security risk assessments to identify and evaluate potential security risks.
  • Develop and implement risk mitigation strategies and controls.

Requirements
Education: 

  • Bachelor’s Degree in any numerate or related field.

Experience:

  • Minimum of 3-5 years of experience in a security engineering role.
  • Proven experience with security technologies and tools (e.g., Burp Suite, OWASP ZAP, Nessus, Metasploit, Kali).
  • Certifications: Relevant certifications such as CEH, OSCP, Sec+, or GIAC are highly desirable.

Technical Skills:

  • Strong understanding of network and system security principles and technologies.
  • Strong understanding of application security vulnerabilities (e.g., SQL injection, XSS, CSRF, SSRF).
  • Familiarity with DevSecOps practices and tools.
  • Experience with security frameworks and standards (e.g., OWASP, ISO 27001, PCI DSS).

ApplicationClosing Date
Not Specified.

Method of Application
Interested and qualified candidates should:
Click here to apply online