Senior Information Security Engineer

Senior Information Security Engineer

Location: Lagos

Employment Type: Full-time

Job Summary

• We are seeking an experienced and highly skilled Senior Information Security Engineer to design, implement, and maintain robust security systems that protect the organization's information assets, infrastructure, applications, and data.
• The successful candidate will play a critical role in strengthening the organization's security posture, identifying and mitigating cyber threats, and ensuring compliance with relevant regulatory requirements and industry best practices.
• The ideal candidate will have strong technical expertise in information security, cybersecurity architecture, cloud security, threat detection, vulnerability management, and incident response.
• This individual will work closely with engineering, infrastructure, compliance, and other business teams to embed security into systems, processes, and everyday operations.

Key Responsibilities

• Design, implement, and maintain comprehensive information security controls, policies, standards, and procedures.

• Lead security assessments, vulnerability management activities, penetration testing coordination, and remediation efforts.

• Monitor security systems and infrastructure to identify, investigate, and respond to potential threats and security incidents.

• Develop and implement incident response procedures, conduct root-cause analyses, and recommend preventive measures.

• Assess and strengthen the security of cloud environments, networks, operating systems, databases, APIs, and applications.

• Implement security solutions across identity and access management, endpoint protection, encryption, network security, and data loss prevention.

• Collaborate with software engineering and DevOps teams to integrate security into the software development lifecycle and CI/CD pipelines.

• Conduct security reviews of applications, infrastructure changes, system configurations, and third-party integrations.

• Establish and maintain security monitoring, logging, alerting, and threat detection capabilities.

• Support compliance with relevant information security standards, regulatory requirements, and data protection obligations.

• Lead security risk assessments, document identified risks, and develop practical mitigation plans.

• Conduct security awareness initiatives and provide technical guidance to employees and relevant stakeholders.

• Evaluate emerging cybersecurity threats, tools, and technologies and recommend improvements to the organization's security posture.

• Prepare security reports, metrics, and recommendations for management and other stakeholders.

• Provide technical leadership and mentorship to other members of the technology and security teams.

• Requirements and Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.

• Minimum of 5–8 years of relevant experience in information security, cybersecurity engineering, or a related technical role, with demonstrated experience in senior-level responsibilities.

• Strong knowledge of security architecture, network security, application security, vulnerability management, and incident response.

• Hands-on experience securing cloud infrastructure, preferably AWS, Microsoft Azure, or Google Cloud Platform.

• Proficiency in security monitoring, SIEM solutions, threat detection, log analysis, and security incident investigation.

• Experience implementing identity and access management controls, multi-factor authentication, privileged access management, and role-based access controls.

• Good understanding of secure software development practices, DevSecOps, API security, and CI/CD security integration.

• Knowledge of risk management frameworks and information security standards such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.

• Familiarity with data protection, encryption, key management, business continuity, and disaster recovery principles.

• Experience conducting security audits, risk assessments, vulnerability assessments, and penetration testing reviews.

• Strong analytical, problem-solving, documentation, and communication skills.

• Ability to work independently, lead technical security initiatives, and collaborate effectively across multidisciplinary teams.

Preferred Certifications:

Candidates with any of the following certifications will have an added advantage:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• Relevant AWS, Azure, or other cloud security certifications.

Key Competencies:

• Cybersecurity architecture and engineering
• Security risk assessment and mitigation
• Cloud and infrastructure security
• Threat detection and incident response
• Vulnerability and patch management
• Security governance and compliance
• Critical thinking and technical problem-solving
• Leadership, collaboration, and stakeholder management.

What We Offer

• Competitive compensation commensurate with experience and expertise.
• An opportunity to contribute to the development of a robust and scalable security environment.
• A collaborative and innovative work environment.
• Opportunities for professional development and continuous learning.
• The opportunity to lead impactful security initiatives and influence security strategy.

Application Closing Date

30th November, 2026.