About this role
Who we are
Moniepoint Inc. is Africa’s all-in-one financial ecosystem, helping 10 million businesses and individuals access seamless payments, banking, credit, and business management tools since 2019.
As Nigeria’s largest merchant acquirer, it powers most of the country’s Point of Sale (POS) transactions. Through its subsidiaries, Moniepoint Inc. processes $22 billion monthly for its customers while operating profitably.
Curious about what makes Moniepoint an incredible place to work? Check out posts on how we cultivate a culture of innovation, teamwork, and growth.
Role Overview:
Moniepoint is looking for an experienced Detection and Response Engineer to join our Incident Response team. The role suits someone who has moved beyond first-line triage and wants to lead investigations from start to finish, then use what they learn to improve our detections. You’ll triage and investigate security incidents, write and tune detection rules in our Detection-as-Code pipeline, and automate detection and response work.
You'll work closely with the Lead to close detection gaps, drive down MTTD/MTTR, and grow toward deeper detection engineering and IR ownership across Moniepoint Group
Key Responsibilities:
Security Incident Response
• Own escalated security incidents end-to-end, including scoping, evidence collection, threat analysis, containment, and remediation
• Analyze and reverse engineer malware to understand its behavior, extract Indicators of Compromise (IOCs), identify Tactics, Techniques, and Procedures (TTPs), and determine appropriate detection and response
• Conduct threat hunting using existing detection content, threat intelligence, and independent hypothesis-driven analysis
• Review and provide feedback on reported security incidents
Detection Engineering
• Write, test, and deploy detection rules (YARA-L or equivalent) through the team's CI/CD Detection-as-Code pipeline
• Tune existing detections to reduce false positives, using incident and hunting findings as the primary signal for what needs fixing
• Identify detection gaps surfaced during investigations and translate them into new rule proposals
• Build and maintain SOAR playbooks and security automation, including AI-driven and agentic workflows, to automate alert triage, enrich investigations, and speed up incident response.
• Participate in tabletop, purple-team, and threat-intel-driven simulation exercises, including scenario execution and converting findings into new detections
• Translate relevant threat intelligence into new detection opportunities or hunting hypotheses
Collaboration & Documentation
• Work cross-functionally with cloud security, infrastructure, and development teams to close systemic gaps identified during investigations
• Maintain accurate records for incidents, detection changes, and threat intelligence, and keep the playbook library current
• Document new detection logic and rule changes to a standard that supports peer re