Application Security Engineer

Job Description

Requirements

• Minimum of 5 years of professional experience with at least 2 years in a security-related role.
• Strong experience with Python.
• Fluent English.
• Experience with common industry certifications like ISO-27001 and PCI-DSS is beneficial.
• Experience with backend Python, GraphQL APIs, Postgres/CockroachDB, GCP/Terraform, and Kubernetes is a plus.
• Excited about finding the right balance between security and velocity.
• Experience remediating non-conformities.
• Ability to help other engineers understand and implement secure patterns.
• Candidates must be based in Ghana, Kenya, UK, or Spain, or in one of Wave's operating markets in Africa.

Responsibilities

• Centralise application-level login and permissions enforcement.
• Configure and utilise external SIEM solutions to monitor infrastructure.
• Increase posture around secret management.
• Security review of public-facing APIs.
• Partner with teams across Wave to define secure guardrails, supporting investigations and incident response.
• Work with the IT Team to fix non-conformities found during audits by central banks and ISO certification.
• Collaborate with product and engineering teams on security-critical features and systems.

Benefits

• Subsidized health insurance for you and your dependents.
• Retirement contributions.
• 6 months fully paid parental leave and subsidized fertility assistance.
• Competitive salary up to $152,100 USD plus equity.