Cyber Security Engineer

Our product started as a side project in 2022 and now has a few hundred paying customers, mostly in Dar es Salaam Region. Small accounting firms in Dar es Salaam Region use our engagement letter and e-signature tool, and most heard about us from a colleague. Code review is required on every pull request, and nobody merges their own changes.

We are adding a Cyber Security Engineer to our Application Security team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We work hybrid out of Dar es Salaam, usually three days in, two days remote.

In this role you will:

• Review code and pull requests for security issues.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Coordinate external penetration tests and track remediation.

Qualifications:

• 2+ years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Ability to explain security issues to engineers without lecturing them.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Programming or scripting ability in Python, Go or similar.

Benefits:

• Hybrid working.
• Annual leave.
• Pension contribution.
• Data and airtime allowance.

We may close the role early, so do not wait too long to apply.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Dar es Salaam Systems.