Application Security Engineer

About the role

The Application Security Engineer will lead the adoption of security policies and standards across Ecobank’s group-wide applications and databases, both in the cloud and on‑premise. You will work closely with vendors, engineers, consultants, architects and business leaders to embed security throughout the Secure Development Lifecycle (SDLC).

Key responsibilities

• Implement and maintain SecDevOps/DevSecOps pipelines for software development and code reviews.
• Act as technical lead for application security programs and initiatives.
• Collaborate with the Software Center to ensure all developments pass through the security pipeline.
• Partner with Business Security & Architecture to apply security architecture recommendations.
• Develop and enforce Identity & Access Management (IAM) controls for native, on‑premise and cloud applications.
• Validate application security controls against corporate policies and industry best practices.
• Perform hands‑on security testing, including vulnerability scanning, static and dynamic code analysis, ethical hacking and business‑logic testing.
• Define and maintain security models for existing and new application platforms.

Required profile

• Proven experience in application security and secure development practices.
• Strong understanding of the Secure Development Lifecycle (SDLC).
• Experience guiding security testing activities and providing remediation recommendations.
• Ability to work collaboratively with cross‑functional technical and business teams.

Required skills

• SecDevOps / DevSecOps
• Secure Development Lifecycle (SDLC)
• Application vulnerability testing
• Static code analysis
• Dynamic code analysis
• Ethical hacking
• Business‑logic exploit testing
• Identity & Access Management (IAM)
• Database Activity Monitoring