Application Security Engineer

ABOUT PAYSTACK Paystack’s mission is to help merchants in Africa get paid by anyone, anywhere in the world. Tens of thousands of notable corporations and businesses in Africa use Paystack’s modern payments infrastructure, including MTN, Bolt, Domino’s Pizza, Smile Communications, AXA Mansard Insurance, and many others. Within over 9 years, our close-knit team has introduced a steady cadence of innovations within the African Payment space, such as automated recurring payments, the ability for customers to pay with only a bank account, automated chargebacks, and much more. We process well over $300 million in transactions monthly, and our double-digit growth has us processing even more every month. We’ve pioneered a new era of simple, powerful technology tools for businesses in Africa, and as we prepare for a period of accelerated growth, we’re looking to you to help build a solid foundation upon which we can support some of the continent’s best-performing businesses. At Paystack, we believe that we will win by recruiting talented people and giving them the space, resources, and support to do the best work of their lives. We hire the most capable people, treat them with genuine respect, and give them the means to succeed. And we’d love your help! As a leader of the Information Security function at Paystack, you will contribute to the business by presenting your technical expertise with a balanced approach to communication and a bias for action. You will be required to work with our leadership teams at all levels of the company to drive solutions that impact our platform for the good of Paystack and ultimately, our customers and stakeholders. You will leverage your experience across various tools and processes to establish policies and standards across the company. WHAT YOU’LL DO We're looking for an intermediate Application Security Engineer to join our Information Security Team. This is your chance to play a critical role in securing Paystack's rapidly growing fintech platform and ensuring that our customers' trust remains unwavering. You'll work closely with our Engineering, DevOps, and Product teams to safeguard our applications from design to deployment. From penetration testing and vulnerability management to building a culture of secure development, you'll be the expert who ensures security is embedded into everything we build. If you're passionate about protecting systems, love a technical challenge, and thrive in a fast-paced, collaborative environment — this role was made for you. JOB RESPONSIBILITIES As an Application Security Engineer/Analyst, you will be a key contributor to our security posture, working closely with engineering and product teams. Your responsibilities will include: - Application Security Testing: Conduct web and mobile application security assessments and API security testing. Perform threat modelling, secure code reviews, and attack surface analysis. Support SAST and DAST initiatives. - Vulnerability Management: Assist in managing the vulnerability lifecycle. Coordinate internal and external security assessments, ensuring proper scoping and timely delivery. Track and report on remediation progress. - Secure Development Lifecycle (SDLC) Integration: Ensure secure coding practices are followed. Collaborate with developers, testers, and business analysts to provide proactive security guidance during development sprints. Contribute to security frameworks, checklists, and guidelines (aligned with OWASP, NIST, MITRE). Work on DevSecOps testing and protective controls. - Incident Response Support: Assist in the investigation and resolution of application security incidents. Contribute to post-incident analysis and implement preventative measures. - Continuous Improvement & Innovation: Stay informed about cybersecurity trends, emerging threats, and attack vectors. Research and contribute to the implementation of innovative security solutions. Identify process improvements to enhance the efficiency and eff…