Skip to content

Open nowPosted 34 hours agoWe saw it 47 min after it went up

Senior Security Engineer

Wave79 open roles

Where
Ghana; Kenya; Spain; United Kingdom
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security EngineerWave · Ghana; Kenya; Spain; United Kingdom
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Wave's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.5% of postings close within 7 days. Measured by our own scanner across the market. Wave postings stay open a median of 11 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.5%7 days
  4. 15.5%14 days
  5. 33.9%30 days
This job: posted 34 hours ago

Wave median: 11 days open

The posting

Our mission

We're making Africa the first cashless continent.

In 2017, over half the population in Sub-Saharan Africa had no bank account. That's for good reason—the fees are too high, the closest branch can be miles away, and nobody takes cards. Without access to financial institutions, people are forced to keep their savings under the mattress. Small business owners rely on lenders who charge extortionate rates. Parents spend hours waiting in line to pay school fees in cash.

We're solving this by building financial services that just work: no account fees, instantly available, and accepted everywhere. In places where electricity, water and roads don't always work, you can still send money with Wave. In 2017, we launched a mobile app in Senegal for cash deposit, withdrawal, and peer-to-peer and business payments. Now, we have millions of users across 9 countries and are growing fast.

Our goal is to make Africa the first cashless continent and that's where you come in...

How you'll help us achieve it

We’re looking for an experienced security engineer who’s independent, excited about getting things done, and ready to hit the ground running. You'll primarily be responsible for our application security, working with our product teams to work on new systems to enhance our security posture. Our customers trust us with their money, and you’ll be at the forefront of making sure we retain that trust!

This broadly scoped role will allow you to get your hands on many different types of security projects, from direct application security to helping our infrastructure team think about security for our databases.

As we integrate AI-powered agents into our engineering and operations workflows, you'll help define and enforce the guardrails around how we use them safely. This includes securing agentic tooling against prompt injection, excessive permissions, and data exfiltration — and building the policies and technical controls to govern AI usage across the company.

Some experience with common industry certifications like ISO-27001 and PCI-DSS would be beneficial, although you won’t be expected to run or oversee audits.

Our to-do list changes constantly, but here are some recent projects:

  • Design our agentic SIEM/SecOps pipelines to evaluate and tune AI-driven triage, alerting, and response automation
  • Secure our MCP integrations against prompt injection, tool misuse, and credential exposure
  • Tune and maintain code security review agents tailored to Wave's codebase, threat model, and regulatory environment
  • Develop internal AI governance standards covering acceptable use, data handling, and audit requirements for LLM-powered tools
  • Centralise application-level login and permissions enforcement including privileged access management
  • Rework our approach to secrets management with ephemeral secrets and tighter access scopes
  • Security review of our public-facing APIs

Key details

  • You can work remotely from anywhere (between UTC -5 and +4) with reliable internet access.
  • Wave covers travel once per year to one of our operating countries in Africa, as well as a yearly stipend of $1200 to meet with coworkers.
  • Our salaries are competitive and are calculated using a transparent formula. For this role, depending on your level of experience, we offer a salary of up to $185,800 USD (or local equivalent), plus a generous equity.
  • We run performance reviews twice a year and award bonuses or promotions to strong performers who have been with the company for more than six months
  • Major benefits:
  • Subsidized health insurance for you and your dependents and retirement contributions (both vary from country-to-country).
  • 6 months fully paid parental leave and subsidized fertility assistance.
  • Flexible vacation, with most folks taking between 30-40 days per year.
  • $10,000 annual charitable donation matching.
  • Yearly travel to one of our African operating countries.

Requirements

  • Minimum of 7-8 years of professional experience with a minimum of 3-5 years of it spent in a security-related role
  • Strong Experience with Python.
  • Fluent English.

You might be a good fit if you

  • Are excited about finding the right balance between security and velocity.
  • Have opinions on how to secure agentic AI systems and want to put them into practice
  • Enjoy helping other engineers understand and implement secure patterns.
  • Are not afraid to take on complicated systems.
  • Are excited to work on lots of different security-related work, from audits to code refactors.
  • Work to make things easier for the next engineer who will touch your code.
  • Always try to improve as a programmer and colleague.
  • Are interested in building governance frameworks for AI usage in a regulated financial services environment
  • Have experimented with LLM-based security tooling and understand both the promise and the failure modes
  • Push through hard problems without giving up.
  • Have experience remediating non-conformities.
  • Are interested in security-focused source code review and penetration testing.
  • Have an interest in growing and mentoring a team.

About Engineering at Wave

You'll report to the Security Team Lead and work closely with the CISO, as part of a small 4 person security team, likely rotating with many of our Product and Platform teams, depending on the project you’re working on. Each team is led by a product manager and mentored by a technical lead on the team.

You’ll be responsible for your own security projects as well as supporting the engineering organisation on security through advice and design review. We organize things to give you as much ownership as possible, so you'll typically be in charge of your projects from planning to delivery.

Our stack (you only need prior experience with python and cloud technologies, if you need to work with anything else, we’ll train you):

  • backend: Python 3 (+ mypy)
  • API layer: GraphQL
  • Android frontend: Kotlin/Jetpack
  • iOS frontend: Swift/SwiftUI
  • web frontend: TypeScript/React
  • database: Postgres
  • infrastructure: GCP / Terraform
  • orchestration: Kubernetes

Our team

  • We have a rapidly growing in-country team in Senegal, Côte d'Ivoire, Mali, Burkina Faso, The Gambia, Uganda, Niger, Sierra Leone, and Cameroon plus remote team members spread across the world.
  • We're deeply passionate about our mission of bringing radically affordable financial services to the people who need them most.
  • We foster autonomy for our employees. You'll own your projects at every stage, from understanding the problem to monitoring your solution in production.
  • We raised the largest Series A in Africa in 2021. Our world-class investors, include Founders Fund, Sequoia Heritage, Stripe, Ribbit Capital, Y Combinator, and Partech Africa.
  • We are on Y Combinator's top companies by revenue.

How to apply

Fill out the form below, and upload a resume in English and a cover letter describing your interest in Wave and the role.

We review applications frequently and recommend that you apply to the role that most closely aligns with your skills, experience and career goals.

Wave is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Wave's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Wave's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Wave's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.