Intelligence Match
Match: ??%
Unlock Your Personalized Match
Sign in to see your exact score breakdown and personalized insights.
Team Tagline
About the role
Moniepoint is a financial technology company digitising Africa’s real economy by building a financial ecosystem for businesses, providing them with all the payment, banking, credit and business management tools they need to succeed. They are looking for an experienced Detection and Response Engineer to join their Incident Response team. The role suits someone who has moved beyond first-line triage and wants to lead investigations from start to finish, then use what they learn to improve detections.
Required Skills
Preferred Skills
Similar Skills not Listed
Responsibilities
- Own escalated security incidents end-to-end, including scoping, evidence collection, threat analysis, containment, and remediation
- Analyze and reverse engineer malware to understand its behavior, extract Indicators of Compromise (IOCs), identify Tactics, Techniques, and Procedures (TTPs), and determine appropriate detection and response
- Conduct threat hunting using existing detection content, threat intelligence, and independent hypothesis-driven analysis
- Review and provide feedback on reported security incidents
- Write, test, and deploy detection rules (YARA-L or equivalent) through the team's CI/CD Detection-as-Code pipeline
- Tune existing detections to reduce false positives, using incident and hunting findings as the primary signal for what needs fixing
- Identify detection gaps surfaced during investigations and translate them into new rule proposals
- Build and maintain SOAR playbooks and security automation, including AI-driven and agentic workflows, to automate alert triage, enrich investigations, and speed up incident response
- Participate in tabletop, purple-team, and threat-intel-driven simulation exercises, including scenario execution and converting findings into new detections
- Translate relevant threat intelligence into new detection opportunities or hunting hypotheses
- Work cross-functionally with cloud security, infrastructure, and development teams to close systemic gaps identified during investigations
- Maintain accurate records for incidents, detection changes, and threat intelligence, and keep the playbook library current
- Document new detection logic and rule changes to a standard that supports peer review and audit
- Ensure IR and detection engineering practices align with PCI-DSS, ISO 27001, and NIST CSF 2.0
- Stay current with cybersecurity trends and threat landscape shifts, and proactively implement IR or detection process improvements
- Drive log source onboarding and ingestion health across enterprise applications and cloud environments; identify critical visibility gaps; and coordinate remediation with relevant teams
- Lead threat modeling exercises for critical infrastructure and translate findings into high-fidelity detection rules and proactive threat hunting hypotheses
- Implement and maintain automated event enrichment pipelines to enhance context for security investigations and improve analyst efficiency
Job Application Safety Disclaimer
Your security and privacy are our top priorities. Please be aware that InStreamIQ will never ask you to pay any fees for job applications, placements, or training as a condition of employment.
Furthermore, legitimate employers will not ask for sensitive personal identification such as your Bank Verification Number (BVN), National Identification Number (NIN), or Passport details during the initial application phase. Do not share financial information or make any payments to individuals or organizations claiming to represent an employer. If you encounter any suspicious requests, please report the listing immediately via our support channels.