Application Security Engineer

About the role

Moniepoint Inc. is looking for a passionate Application Security Engineer to embed security throughout its product lifecycle. You will act as a security champion, guiding engineering teams to design, build, and release secure applications.

Key responsibilities

• Serve as a Security Champion across product teams, influencing design and engineering decisions.
• Integrate threat modeling and security requirements into feature architecture and design reviews.
• Promote Secure Coding standards via CI/CD automation, peer reviews, and training.
• Lead vulnerability management, including identification, risk‑based triage, and remediation tracking.
• Develop and maintain standard security packages such as secure configuration baselines, code templates, and CI/CD security integrations.
• Conduct hands‑on and automated penetration testing across environments and release cycles.
• Enable continuous improvement through knowledge transfer, best‑practice sharing, and feedback loops.

Required profile

• 3‑5 years of hands‑on experience in application security, DevSecOps, or related roles.
• Software engineering background with at least 2 years working in an engineering team.
• Deep understanding of secure SDLC and secure‑by‑design principles.
• Proven experience in penetration testing or red‑team engagements.
• Excellent communication skills to translate technical risks into actionable steps.
• Offensive security certifications (e.g., OSCP, OSCE, GXPN) are a plus.

Required skills

• Java, Python, JavaScript programming.
• Cloud platforms: AWS, Azure, GCP.
• Security scanning tools: SAST, DAST, SCA.
• CI/CD pipelines and security automation.
• Penetration testing and red‑team techniques.
• Container security and secure configuration baselines.