Job Description
JOB SUMMARY: The CyberSecurity Engineering Specialist [Application & Database] will be responsible for safeguarding the security of our on-premises and cloud-based software, including applications, portals, programs, middleware, and databases. This role involves designing, implementing, and maintaining robust security processes and solutions to protect our digital assets and databases. The ideal candidate will possess a deep understanding of diverse security domains to ensure the seamless integration of security practices throughout the software and database development lifecycle, from inception to decommission.
ROLES AND RESPONSIBILITIES
Application Security:
Design, implement, and enforce secure development practices in collaboration with software development teams.
Conduct comprehensive security assessments, including static and dynamic application security testing (SAST & DAST), to identify vulnerabilities within application code.
Collaborate with development teams to champion secure coding practices and remediate identified application vulnerabilities, ensuring a secure development lifecycle (SDLC).
Evaluate and implement tools and technologies for application security, such as runtime application self- protection (RASP) and web application firewalls (WAF).
Security Testing and Vulnerability Management:
Support the performance of penetration testing, vulnerability scanning, and code reviews.
Responding to security incidents, conducting forensic investigations, and implementing corrective actions.
Assess the security posture of the bank's cloud environments (AWS, Azure, etc.), ensuring configurations and access controls comply with industry’s best practices and regulatory requirements.
Database Security:
Securing database systems, including access controls, encryption, data masking, database hardening, etc.
Ensuring data privacy and compliance with data protection regulations and frameworks.
Monitor databases for vulnerabilities, unauthorized access, and potential breaches.
Incident Response & Compliance:
Assist in the investigation and mitigation of security incidents related to applications and databases.
Develop playbooks for database and application-related incident response scenarios.
MINIMUM EDUCATION AND EXPERIENCE REQUIRED
The ideal candidate for this role must possess the following competencies and qualification:
Bachelor’s degree in computer science or a technology-related field.
Relevant certifications in Information Security and Cybersecurity space, including CISSP, CSSLP, CEH, CISM, DevSecOps, etc.
Minimum 3- 5 years of experience in security engineering or a related field, with a focus on application and database security.
Experience with security tools and technologies (e.g., Burp Suite, OWASP, SQL Injection tools, etc).
Job Type: Full-time
Pay: ₦800,000.00 - ₦1,000,000.00 per month
ROLES AND RESPONSIBILITIES
Application Security:
Design, implement, and enforce secure development practices in collaboration with software development teams.
Conduct comprehensive security assessments, including static and dynamic application security testing (SAST & DAST), to identify vulnerabilities within application code.
Collaborate with development teams to champion secure coding practices and remediate identified application vulnerabilities, ensuring a secure development lifecycle (SDLC).
Evaluate and implement tools and technologies for application security, such as runtime application self- protection (RASP) and web application firewalls (WAF).
Security Testing and Vulnerability Management:
Support the performance of penetration testing, vulnerability scanning, and code reviews.
Responding to security incidents, conducting forensic investigations, and implementing corrective actions.
Assess the security posture of the bank's cloud environments (AWS, Azure, etc.), ensuring configurations and access controls comply with industry’s best practices and regulatory requirements.
Database Security:
Securing database systems, including access controls, encryption, data masking, database hardening, etc.
Ensuring data privacy and compliance with data protection regulations and frameworks.
Monitor databases for vulnerabilities, unauthorized access, and potential breaches.
Incident Response & Compliance:
Assist in the investigation and mitigation of security incidents related to applications and databases.
Develop playbooks for database and application-related incident response scenarios.
MINIMUM EDUCATION AND EXPERIENCE REQUIRED
The ideal candidate for this role must possess the following competencies and qualification:
Bachelor’s degree in computer science or a technology-related field.
Relevant certifications in Information Security and Cybersecurity space, including CISSP, CSSLP, CEH, CISM, DevSecOps, etc.
Minimum 3- 5 years of experience in security engineering or a related field, with a focus on application and database security.
Experience with security tools and technologies (e.g., Burp Suite, OWASP, SQL Injection tools, etc).
Job Type: Full-time
Pay: ₦800,000.00 - ₦1,000,000.00 per month
Sponsored
