This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We're looking for an intermediate Application Security Engineer to join our Information Security Team. This is your chance to play a critical role in securing Paystack's rapidly growing fintech platform and ensuring that our customers' trust remains unwavering. You'll work closely with our Engineering, DevOps, and Product teams to safeguard our applications from design to deployment. From penetration testing and vulnerability management to building a culture of secure development, you'll be the expert who ensures security is embedded into everything we build. If you're passionate about protecting systems, love a technical challenge, and thrive in a fast-paced, collaborative environment — this role was made for you.
Job Responsibility:
Application Security Testing: Conduct web and mobile application security assessments and API security testing. Perform threat modelling, secure code reviews, and attack surface analysis. Support SAST and DAST initiatives
Vulnerability Management: Assist in managing the vulnerability lifecycle. Coordinate internal and external security assessments, ensuring proper scoping and timely delivery. Track and report on remediation progress
Secure Development Lifecycle (SDLC) Integration: Ensure secure coding practices are followed. Collaborate with developers, testers, and business analysts to provide proactive security guidance during development sprints. Contribute to security frameworks, checklists, and guidelines (aligned with OWASP, NIST, MITRE). Work on DevSecOps testing and protective controls
Incident Response Support: Assist in the investigation and resolution of application security incidents. Contribute to post-incident analysis and implement preventative measures
Continuous Improvement & Innovation: Stay informed about cybersecurity trends, emerging threats, and attack vectors. Research and contribute to the implementation of innovative security solutions. Identify process improvements to enhance the efficiency and effectiveness of security assessments
Requirements:
Minimum 3 years in application security, IT security, or software development with a security focus
Hands-on experience with penetration testing, vulnerability assessments, and secure code reviews
Proven experience with SAST, DAST, and threat modelling frameworks
Practical knowledge of secure software development practices (OWASP Top 10, CWE)
Hands-on development experience or scripting ability (Python, JavaScript, Bash)
Strong understanding of web application security, API security, and cloud security concepts (AWS, Azure, or GCP)
Understanding of DevSecOps principles and CI/CD security integration
Excellent communication skills with the ability to explain complex security concepts to technical and non-technical audiences
Collaborative mindset with the ability to work cross-functionally
What we offer:
Competitive compensation package and benefits
Stripe Equity compensation
Full medical coverage
Wellbeing stipend
Generous leave and sabbatical policies
Hybrid working environment
Smart, kind colleagues who’re invested in your growth