Detection and Response Engineer (Remote)

About this role

A remote role for an experienced Detection and Response Engineer to join Moniepoint's Incident Response team. The role involves triaging and investigating security incidents, developing and tuning detection rules, and automating detection and response workflows. You will lead end-to-end incidents, work with cloud and security teams to close gaps, and advance detection engineering across Moniepoint Group. The employer provides exposure to fintech security challenges, mentorship, and a competitive compensation package. The position requires working in Nigeria and focuses on building detection capabilities and reducing incident metrics like MTTD/MTTR.

What you would do

• Triage and investigate security incidents from start to finish.
• Analyze and reverse engineer malware to extract IOCs and TTPs.
• Own escalated security incidents, including containment and remediation.
• Review and provide feedback on reported security incidents.
• Build and maintain SOAR playbooks and security automation.
• Identify detection gaps and propose new rules.
• Write, test, and deploy detection rules via CI/CD pipeline.
• Tune detections to reduce false positives using investigation data.
• Lead threat modeling and translate findings into new detections.
• Document detection logic and maintain the playbook library.

What they are asking for

• Bachelor's degree in cybersecurity, computer science, information technology, or related field (or equivalent hands-on experience).
• 2 to 4 years in incident response, SOC operations, or detection engineering.
• Working knowledge of MITRE ATT&CK and mapping to detection coverage.
• Solid experience with SIEM and EDR, log analysis, and end-to-end incident triage/investigation.
• Experience writing or tuning detection rules in a SIEM using languages like YARA-L, CQL, KQL, or Sigma.
• Comfort with Python, JavaScript, or similar scripting languages.
• Preferred: IR/detection certifications (eg GCIH, CySA+), multi-cloud exposure (GCP/AWS), digital forensics or malware analysis experience.

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.