Chipper is the largest mobile cross-border money transfer platform in Africa. We are a small passionate team, dedicated to expanding financial inclusion in some of the global regions most in need of accessible, interoperable, easy-to-use, and affordable financial services.
We are recruiting to fill the position below:
Job Title: Senior Application Security Engineer
Location: Nigeria (Remote)
About Our Tech Stack
- Node.js + Typescript service-based architecture
- React Native Android / iOS application
- PostgreSQL application databases
- RabbitMQ for inter-server communication
- Server hosting on Heroku and Google Cloud Platform
- Fully automated CI / CD using Heroku CI and Github
- Application monitoring with Datadog, Logz.io, and Amplitude
- Snowflake for data warehousing and analysis
- Python for in-depth data analysis, transformation, and reporting
What you will work on:
- Security engineering at Chipper spans the full-stack – this role involves gaining an understanding of the technical architecture of the Chipper Platform, continuously examining different attack surfaces, and proactively identifying and implementing security-hardening measures.
- Security engineering at Chipper is also a heavily collaborative role. Security is a principle that permeates everything that we work on, and the security engineering team works with a wide variety of other teams in order to spread understanding of potential vulnerabilities and to instill a security-focused mindset within everything we do.
Responsibilities
Some examples of responsibilities include:
- Actively participating in project planning, code reviews, and spec reviews, to assist in hardening the design and implementation of a wide variety of projects
- Collaborating with the the data intelligence team to identify new queries, analysis pipelines, ML models, and alerts to be built in order to detect security-relevant activity
- Working with the DevOps team to verify full firewall coverage, and managing internal key storage and access controls
- Integrating with new security software vendors and managing current security-related software integrations
- Orchestrating penetration tests and other security-related accreditations with external firms
- Working with different product teams to harden various 3rd-party API integrations with enhanced connection verification and scheduled credential rotations
- Brainstorming with the design team to create user-facing systems that are secure and easy to use
Requirements
What you should have:
- The role isn’t very focused on being an expert on any specific security domain (such as in a specific language or framework or layer of the application stack) – the most important skills are:
- Having an inquisitive, curious, and investigative mindset – thriving at independently reviewing designs and codebases and seeking out potential vulnerabilities
- Broad full-stack technical ability – being able to quickly gain familiarity with different technologies in-use throughout the team in order to competently understand the code and system designs
Great to have:
- Past experience in a role with significant security engineering responsibilities
- Past experience with fintech and early-stage startups
- Leadership interest and/or experience
- Familiarity with our tech stack – Node.js, Typescript, Python, React Native, RabbitMQ, PostgreSQL, Snowflake
- Familiarity with our tool stack – ELK, Datadog, Cloudflare, Heroku, AWS, GCP, Retool
Application Closing Date
Not Specified.
How to Apply
Interested and qualified candidates should:
Click here to apply online