Detection and Response Engineer
Moniepoint1 day ago
Remote, NigeriaMid Level / Senior
Responsibilities
- Own escalated security incidents end-to-end, including scoping, evidence collection, threat analysis, containment, and remediation.
- Analyze malware, extract indicators of compromise and tactics, techniques, and procedures, and convert findings into detection and response actions.
- Conduct threat hunting using detection content, threat intelligence, and hypothesis-driven analysis.
- Write, test, deploy, and tune detection rules through the Detection-as-Code pipeline.
- Build and maintain SOAR playbooks, security automation, AI-driven workflows, and agentic workflows for alert triage and investigation enrichment.
- Participate in tabletop, purple-team, and threat-intelligence-driven simulations and turn findings into new detections.
- Collaborate with cloud security, infrastructure, and development teams to close systemic security gaps.
- Maintain incident records, detection documentation, threat intelligence records, and the playbook library.
- Align incident response and detection engineering practices with PCI-DSS, ISO 27001, and NIST CSF 2.0.
- Drive log-source onboarding and ingestion health, identify visibility gaps, and coordinate remediation.
- Lead threat modeling for critical infrastructure and implement automated event-enrichment pipelines.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent hands-on experience.
- 2–4 years of experience in incident response, SOC operations, or detection engineering.
- Experience writing or tuning SIEM detection rules using YARA-L, CQL, KQL, Sigma, or similar rule languages.
- Experience with SIEM and EDR platforms, log analysis, and end-to-end incident triage and investigation.
- Working knowledge of MITRE ATT&CK and its relationship to detection coverage.
- Comfort with Python, JavaScript, or a similar scripting language for automation and detection support.
- Strong written communication skills for incident reports and detection documentation.
- Preferred experience with SOAR platforms or automation for triage and enrichment.
- Preferred exposure to GCP, AWS, and fintech or financial-sector threats.
- Foundational digital forensics or malware analysis experience is preferred.
- GCIH, CySA+, or equivalent incident response or detection engineering certifications are preferred.
Benefits
- Clear path toward senior detection engineering and incident response ownership.
- Direct mentorship from a Lead who owns the detection-as-code and automation stack.
- Competitive compensation and benefits, including salary, pension, health insurance, and annual bonus.
- Learning and development environment with knowledge sharing, training, and internal technical talks.
- Opportunity to work on real-world fintech security challenges protecting systems used by millions of users.
Tech Stack
Categories
About Moniepoint
Moniepoint builds an all-in-one financial platform for African businesses and consumers, offering merchant payments, POS devices, digital banking, credit, cross-border, and business management tools. The company earns fees from payments and financial services and operates as a privately held firm. Founded in 2015 and headquartered in London, it is Nigeria’s largest merchant acquirer and processes over $250 billion in digital payment value annually.