About this role
Hydrogen Job Posting
Application Security Analyst
Location: Victoria Island, Lagos
Employment Type: Full-time
Job Summary
- We are seeking an Application Security Analyst to protect the applications powering our card issuance, card management, and switch/transaction processing platforms.
- You will embed security across the SDLC, conduct testing and code reviews, support PCI-DSS compliance, and drive remediation efforts. You'll partner with engineering, SOC, and security teams to secure card and switch infrastructure, including third-party and ISO 8583 integrations.
What you will do
- Secure Application Testing & Review – Conduct SAST, DAST, SCA, and manual secure code reviews, along with vulnerability assessments and penetration testing (web, API, mobile) across card management, switch, and POS/ATM integration systems.
- Secure SDLC & CI/CD Integration – Design and embed security checkpoints throughout the development lifecycle and CI/CD pipelines to ensure security is built into application development from the start.
- PCI-DSS Compliance & Risk Management – Support control validation, evidence collection, and remediation tracking for PCI-DSS compliance, while reviewing third-party and vendor integrations (including ISO 8583 messaging and card network interfaces) for security risk.
- Monitoring & Incident Response – Monitor application-layer security events, collaborate with SOC teams to investigate anomalies in card/switch transaction flows, and participate in incident response for application-level security incidents.
- Reporting & Security Enablement – Document findings and produce risk assessment reports, partner with engineering teams to track remediation to closure, and contribute to secure coding training and awareness sessions for developers.
Requirements
- Bachelor's Degree in cyber/information security, computer science, information technology or any related discipline.
- 3 - 5 years of relevant experience in application security, penetration testing, or software security engineering, with prior exposure to fintech, banking, card processing, or payment switch environments considered a strong advantage.
- Certifications: CompTIA Security+ (required or in progress); CEH, OSCP, CSSLP, PCI-DSS, or cloud security certifications (AWS Security Specialty, AZ-500) preferred; progress toward CISSP a plus.
- Strong analytical, communication, and cross-functional collaboration skills; able to translate technical risk into business terms and perform under pressure.
Application Closing Date
30th October, 2026.