Detection and Response Engineer

About the role

Moniepoint is Africa’s all-in-one financial ecosystem, helping businesses and individuals access payments, banking and management tools. This role owns end-to-end security incident response, detection engineering, and automation to improve detections and reduce response times.

What you'll do

• Own escalated security incidents from scoping to remediation.
• Analyze malware behavior, extract IOCs, and identify TTPs for detections.
• Write, test, and deploy detection rules via a CI/CD driven pipeline.
• Tune detections to reduce false positives and propose new rules from investigations.
• Build and maintain SOAR playbooks and security automation, including AI-driven workflows.
• Collaborate with cloud security, infra, and development teams and contribute to incident documentation.

What they're looking for

• 2 - 4 years of incident response, SOC operations, or detection engineering experience.
• Experience writing or tuning detection rules in a SIEM using languages such as YARA-L, CQL, KQL, or Sigma.
• Solid SIEM and EDR knowledge, and end-to-end incident triage and investigation.
• Strong scripting skills in Python or JavaScript for automation and detection support.
• Familiarity with MITRE ATT&CK mappings to detection coverage.
• Excellent written communication for incident reports and detection documentation.

For applicants in Nigeria

• The listing states Remote - Nigeria as location, with eligibility noted; Nigeria-based applicants are explicitly eligible.
• Timezone expectations are not specified; confirm during interview.
• Employment type is not explicitly stated; the listing does not specify contractor vs employee.
• Pay currency or range is not stated; no salary details provided.
• No visa or work-authorization notes beyond eligibility are specified.