{"id":4026698,"url":"https://alion.io/job/afreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops","title":"Senior Analyst, Pan African Payments & Settlement Systems (DevSecOps)","company":{"id":1783713,"name":"Afreximbank","domain":"afreximbank.com","url":"https://alion.io/company/afreximbank","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":100,"open_postings":12,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cairo, Egypt"],"countries":["EG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Zero Trust","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-11-10T17:12:39Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-15T00:59:46Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":3},"description":"The Senior Analyst, DevSecOps is responsible for designing, securing, and operating a highly resilient cloud infrastructure environment by embedding security controls throughout the software development lifecycle and implementing cloud-native security defense capabilities. The role ensures secure application development, infrastructure resilience, proactive threat detection, incident response readiness, and protection of mission-critical payment infrastructure and digital assets.\nThe position is responsible for ensuring secure builds are deployed safely, cloud environments remain continuously hardened, vulnerabilities are proactively remediated, and security incidents are detected and contained at the earliest possible stage of compromise.\nKey Responsibilities:\n1.Cloud Infrastructure Security Engineering\n· Design, build, and maintain secure-by-default AWS cloud infrastructure supporting mission-critical payment systems.\n· Implement baseline security hardening across AWS cloud services including IAM, KMS, EC2, ECS, EKS, VPCs, storage services, databases, and load balancers.\n· Maintain cloud infrastructure security hardening posture at minimum 95% compliance across all security domains.\n· Ensure infrastructure resilience, high availability, and secure cloud architecture principles are consistently implemented.\n· Implement Zero Trust security architecture across the PAPSS cloud environment.\n2. DevSecOps Pipeline Security & Secure Software Delivery\n· Integrate automated security controls into CI/CD pipelines to ensure secure development and deployment practices.\n· Implement and manage security testing tools including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container image scanning, dependency scanning, and secrets detection tools.\n· Ensure 100% of application source code is continuously scanned using approved DevSecOps security testing mechanisms.\n· Redesign and continuously improve PAPSS GitHub repositories and CI/CD workflows to ensure maximum security and resilience.\n· Secure build environments by enforcing artifact integrity, software provenance controls, deployment promotion controls, and preventing pipeline abuse or credential leakage.\n· Ensure zero source code exposure and prevent malicious or vulnerable deployments into production environments.\n3. Identity, Access Management & Workload Security\nDesign and enforce least privilege access controls for users, services, and workloads across cloud environments. \nImplement role-based access controls, short-lived credentials management, and secure lifecycle management of secrets and cryptographic keys using appropriate technologies. \nEnsure zero exposure of sensitive secrets, credentials, private keys, and privileged access mechanisms. \nSecure containerized workloads and virtual machine environments by implementing workload isolation, secure metadata handling, network segmentation, service isolation, and runtime security controls. \nPrevent privilege escalation risks and eliminate standing privileged access within production environments. \n4. Security Monitoring, Vulnerability Management & Incident Response\n· Own cloud security monitoring and alerting capabilities across all AWS accounts and cloud workloads.\n· Design, implement, and continuously tune cloud security detection use cases covering privilege escalation, credential misuse, secrets exposure, CI/CD abuse, data exfiltration, and abnormal system behavior.\n· Maintain near-zero critical and high-risk vulnerabilities in production environments.\n· Ensure 100% remediation of critical vulnerabilities within defined service level agreements, prioritizing vulnerabilities under active exploitation or high probability of exploitation within a maximum of three days.\n· Lead investigation, containment, and response activities for cloud security incidents and cyber threats.\n· Maintain security monitoring and incident response capabilities capable of detecting and responding during or before the earliest stage of compromise (“Initial Access”).\n· Support cyber resilience initiatives, ransomware response planning, and recovery readiness for critical systems.\n5. Compliance Responsibilities\n1. Understand and adhere to the Bank's AML, Regulatory and Conduct Compliance policies and procedures, notably.\na. Staff Handbook (has code of conduct provisions)\nb. Anti-Money Laundering (AML), Counter Financing of Terrorism and Counter Proliferation Financing\nc. Conflicts of Interest and Policies on Staff Involvement in External Engagements/Activities\nd. Anti-Bribery & Corruption\ne. Insider Trading Guidelines\n2. Report any suspicious or non-compliant activities or matters relating to the Bank’s staff or the customers to the Compliance Department.\n3. Complete the Annual Compliance Training/Assessment.\nRequirements\nAcademic Qualifications\nBachelor’s Degree in Computer Engineering, Computer Science, Information Technology, Cyber Security, or related discipline.\nRelevant postgraduate/professional qualification is an added advantage.\nProfessional Experience\n· Minimum 5+ years of experience in Cloud Engineering, DevSecOps, or Cloud Security Engineering roles.\n· Proven hands-on experience securing AWS cloud environments in enterprise production settings.\n· Experience operating within highly regulated environments such as banking, fintech, financial services, or payment systems.\n· Demonstrated experience in cloud security monitoring, threat detection, vulnerability management, and incident response within cloud-native environments.\n· Experience with zero-trust architecture.\nBenefits\nPrivate Health Insurance\nTraining & Development\nPerformance Bonus","description_format":"text","description_chars":5702,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Development Finance Institutions","Factoring & Trade Finance"],"lifecycle":[{"event":"open","at":"2026-11-10T17:12:39Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":45,"reasons":["seen:3","win:early"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/afreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops","json_url":"https://alion.io/job/afreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops.json","meta":{"generated_at":"2026-11-15T01:49:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3424,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1783713},"rest":"https://alion.io/mcp/rest/get_company?id=1783713"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fafreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fafreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fafreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/afreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fafreximbank-senior-analyst-pan-african-payments-settlement-systems-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4026698}},{"tool":"search_jobs","arguments":{"company":"afreximbank.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4026698},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}