All jobs
Detection and Response Engineer
About this role
Moniepoint is seeking an experienced Detection and Response Engineer to join its Incident Response team. The role involves leading investigations from start to finish, improving detections through the Detection-as-Code pipeline, and automating detection and response tasks. You will work to reduce mean time to detect and respond, collaborate with other security teams, and grow into deeper detection engineering and IR ownership. The employer operates as Africa’s all-in-one financial ecosystem and Nigeria’s largest merchant acquirer, processing payments and offering security-focused security operations. The position targets someone with hands-on incident response and detection engineering experience.
What you would do
- Own escalated security incidents end-to-end, including scoping, evidence collection, threat analysis, containment, and remediation
- Analyze and reverse engineer malware to understand behaviour, extract IOCs, identify TTPs, and determine detection and response
- Conduct threat hunting using detection content, threat intelligence, and hypothesis-driven analysis
- Review and provide feedback on reported security incidents
- Write, test, and deploy detection rules through the CI/CD Detection-as-Code pipeline
- Tune detections to reduce false positives using investigation findings
- Identify detection gaps and translate them into new rule proposals
- Build and maintain SOAR playbooks and security automation to speed up incident response
- Participate in tabletop and threat-intel driven simulations and translate findings into detections
- Translate threat intelligence into new detection opportunities or hunting hypotheses
What they are asking for
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related field (or equivalent hands-on experience)
- 2 - 4 years of experience in incident response, SOC operations, or detection engineering
- Experience writing or tuning detection rules in a SIEM (Google SecOps or similar) using YARA-L, CQL, KQL, or Sigma
- Solid experience with SIEM and EDR platforms, log analysis, and end-to-end incident triage/investigation
- Working knowledge of MITRE ATT&CK and its mapping to detection coverage
- Proficiency in Python, JavaScript or similar scripting language for automation
- Strong written communication skills for incident reports and detection documentation
Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.