Senior Application Security Engineer

About the role

Moniepoint Inc. is looking for a Senior Application Security Engineer to embed security throughout its software development lifecycle. You will partner with engineering teams to protect customer data while they build innovative fintech services, guiding secure design, threat modeling, and code review.

Key responsibilities

• Define and execute security strategy for product teams, aligning with business goals.
• Lead threat modeling, security architecture reviews, and design guidance for diverse software projects.
• Mentor engineers and foster a culture of security excellence.
• Conduct adversarial security analysis using automated tools and custom exploit development.
• Perform manual and automated secure code reviews across Java, Python, JavaScript, and cloud‑native stacks.
• Develop and enhance security automation tools (SAST/DAST/IAST) to scale vulnerability detection.
• Identify complex risks through offensive research and advocate for cutting‑edge mitigations.
• Maintain and evolve threat models for critical applications and micro‑services.
• Integrate security controls into CI/CD pipelines and lead incident response for application security events.

Required profile

• 5+ years of experience in application security, including at least 2 years in a senior or lead role.
• Deep knowledge of threat modeling methodologies (e.g., STRIDE, PASTA) and secure SDLC implementation.
• Proven ability to translate technical risks into actionable guidance for engineers and executives.
• Strong communication and mentorship skills to elevate the security posture of development teams.

Required skills

• Threat modeling (STRIDE, PASTA)
• Penetration testing and exploit development
• Secure code review for Java, Python, JavaScript
• Experience with cloud platforms (AWS, Azure, GCP)
• SAST, DAST, IAST tooling
• Security automation and CI/CD pipeline integration
• Incident response and root‑cause analysis