Skip to main content
Hiring?Request relevant candidates.
W

Application Security Engineer

Wave Mobile Money

Posted 4 months agoRemote, Ghana

Location

Remote, Ghana

Job Type

Full-time

Experience

Mid-Level

Category

Technology

Job Description

We're making Africa the first cashless continent. In 2017, over half the population in Sub-Saharan Africa had no bank account. That's for good reason—the fees are too high, the closest branch can be miles away, and nobody takes cards. Without access to financial institutions, people are forced to keep their savings under the mattress. Small business owners rely on lenders who charge extortionate rates. Parents spend hours waiting in line to pay school fees in cash. We're solving this by building financial services that just work: no account fees, instantly available, and accepted everywhere. In places where electricity, water and roads don't always work, you can still send money with Wave. In 2017, we launched a mobile app in Senegal for cash deposit, withdrawal, and peer-to-peer and business payments. Now, we have millions of users across 9 countries and are growing fast. Our goal is to make Africa the first cashless continent and that's where you come in... We care about the big picture. We don’t hire engineers to just ship tickets. We hire them to solve problems. That means caring deeply about outcomes, understanding context, and jumping in wherever something’s broken, even if it’s technically “not your area.” When we see problems, inefficiencies, or opportunities to make something better, we act. We dig into operational issues, clarify fuzzy product specs, or step into unfamiliar code to help unblock teammates. We move as fast as possible. Speed matters. It lets us try things quickly, get feedback early, and course-correct while it’s cheap. So we write small PRs. We aim for MVPs. We leave TODOs and file follow-ups. We don’t over-perfect v1. That said, we’re building a financial product. Some things—like money movement, correctness, or security—deserve more caution. We like boring technology. We favor tools that are reliable, well-understood, and easy to debug. This keeps us focused on solving meaningful problems instead of wrestling with unpredictable infrastructure. If a new technology helps us move faster, build safer, or solve a real need, we’ll consider it. But we don’t adopt tools just because they’re new—we adopt them because they’re right. Simplicity is a strategy. It lets us focus our energy where it matters most: serving our users. #LI-DH1 #LI-REMOTE Wave is now the largest financial institution in Senegal and Côte d'Ivoire, with millions of users, growing rapidly year-on-year. And, we’re still in the early days of our product roadmap and pote
ProGigFinder Press

Fifty silent applications, or one that lands.

Pick any job above and pay $1.49 with MoMo or Card. In about 60 seconds you get a CV written for that role, using relevant terms and a structure recruiters can scan quickly.

Get my CV for this job: $1.49

Requirements

  • backend: Python 3 (+ mypy)
  • API layer: GraphQL
  • android frontend: Kotlin/Jetpack
  • iOS frontend: Swift/SwiftUI
  • web frontend: TypeScript/React
  • database: Postgres/CockroachDB
  • infrastructure: GCP/Terraform
  • orchestration: Kubernetes
  • Wave provides a yearly $1,200 stipend to support coworking meetups with teammates.
  • Minimum of 5 years of professional experience with a minimum of 2 years of it spent in a security-related role.
  • Strong Experience with Python.
  • Fluent English.
  • Are excited about finding the right balance between security and velocity.
  • Push through hard problems without giving up.
  • Have experience remediating non-conformities.
  • Enjoy helping other engineers understand and implement secure patterns.
  • Are not afraid to take on complicated systems.
  • Are excited to work on lots of different security-related work, from audits to code refactors.
  • Work to make things easier for the next engineer who will touch your code.
  • Always try to improve as a programmer and colleague.
  • Are interested in security-focused source code r

Responsibilities

  • Our to-do list changes constantly, but here are some recent projects and activities:
  • Centralise application-level login and permissions enforcement
  • Configure and utilise external SIEM solutions to monitor our infrastructure
  • Help us increase our posture around secret management
  • Security review of our public-facing APIs
  • Partner with teams across Wave to define secure guardrails, supporting investigations and incident response
  • Work with our IT Team to fix any non-conformities found during audits by central banks and ISO certification

Benefits

  • We are on Y Combinator's top companies by revenue.
  • Wave is an equal-opportunity e