Neptune is on a mission to empower people through financial inter-mediation in Nigeria and Africa. We are poised to meet your business and personal financial needs.
Role Summary
- We are seeking a highly skilled Security Engineer to design, implement, and continuously improve the security posture of Neptune MFB’s core banking systems, digital channels, APIs, and infrastructure. This role is hands-on, working closely with backend, DevOps, and product teams to ensure bank-grade security, regulatory compliance, and proactive threat mitigation.
Key Responsibilities
- Design and enforce application, infrastructure, and data security standards across all platforms
- Implement and maintain API security (OAuth2, JWT, mTLS, rate limiting)
- Conduct security reviews of microservices, gRPC APIs, and third-party integrations
- Lead penetration testing, vulnerability scanning, and remediation
- Secure databases (MySQL/PostgreSQL), backups, and replication pipelines
- Monitor and respond to security incidents, breaches, and anomalies
- Implement SIEM, logging, alerting, and audit trails
- Embed security into the development lifecycle by automating code quality, vulnerability, and compliance checks within pull requests and CI/CD pipelines.
- Ensure compliance with CBN guidelines, NDPR, PCI-DSS, and internal policies
- Work with DevOps to secure Docker, Kubernetes, CI/CD pipelines, and secrets management
- Support audits, regulatory reviews, and internal risk assessments
Required Skills & Experience
- 3+ years experience in security engineering or application security
- Strong knowledge of web, API, and backend security
- Experience securing Java Spring Boot, Node.js, and microservice architectures
- Hands-on experience with: OAuth2 / OpenID Connect, TLS, encryption at rest & in transit, Firewalls, WAFs, IDS/IPS
- Familiarity with cloud and on-prem security models
- Strong understanding of banking / fintech security risks
- Ability to translate security risks into clear business impact
Nice to Have
- Experience in financial services or core banking
- Security certifications (CEH, CISSP, Security+, etc.)
- Experience with ISO 27001 or SOC audits
Method of application
Meet the Qualifications? Email your CV to [email protected] using the position as subject of email.