{"id":3960429,"url":"https://alion.io/job/vfd-group-senior-security-engineer","title":"Senior Security Engineer","company":{"id":62388,"name":"VFD Group","domain":"vfdgroup.com","url":"https://alion.io/company/vfd-group","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SeamlessHiring","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lagos, Nigeria"],"countries":["NG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CAPA","optional":false},{"name":"CI/CD","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-09T10:52:36Z","employer_posted_date":null,"last_verified_at":"2026-11-09T10:52:36Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"VFD Group is an alternative financial service holding company that creates value by working within Nigeria's informal financial sector to create innovative products and solutions that are accessible to the everyday Nigerian.\n\nStarting as an idea, VFD Group has grown into a cross-border investment firm with a presence in Sub-Saharan Africa, the UK, and the US. We have expanded across sectors through collaboration and responsible leadership, building a diverse portfolio of companies focused on real-world impact and positive change. Each investment empowers communities and strengthens our presence in global markets, fuelling growth in Africa and beyond.\n\nWe are recruiting to fill the position below:\n\nJob Title: Senior Security Engineer\n\nLocation: Lagos\n\nEmployment Type: Full-time\n\nJob Summary\n\n The Senior Security Engineer is a high-impact technical lead responsible for evaluating,testing,and validating the effectiveness of the Group’s cybersecurity controls,data privacy frameworks,and technical architectures across all subsidiary operations.\n\n This role leads technical risk assessments—including penetration testing,vulnerability scanning,Data Protection Impact Assessments (DPIAs),and threat modelling—to proactively identify security gaps in cloud,on-premise,and application environments.\n\nResponsibities\n\nSecurity Assurance & Architecture Assessment:\n\n Evaluate defense-in-depth frameworks across VFD Group's financial services and subsidiary ecosystem to validate control effectiveness and identify coverage gaps.\n\n Perform risk-based architecture reviews,threat modeling assessments,and security design evaluations for new software platforms,infrastructure,and third-party integrations.\n\n Audit and assure technical architectures against regulatory requirements,industry benchmarks (e.g.,ISO 27001,PCI-DSS,NIST CSF),and internal security policies.\n\nVulnerability & Penetration Testing:\n\n Plan,scope,and execute comprehensive vulnerability assessments across cloud,hybrid,and on-premise infrastructure,API endpoints,and web/mobile applications.\n\n Conduct ethical hacking and internal/external penetration testing to proactively identify exploit paths,logic flaws,and privilege escalation vulnerabilities.\n\n Perform SAST/DAST reviews and source code security audits to validate application resilience before production deployment.\n\nData Protection & Privacy Assurance:\n\n Conduct Data Protection Impact Assessments (DPIAs) and privacy compliance reviews for new systems,data workflows,and third-party integrations processing sensitive customer data.\n\n Validate the technical implementation of data classification,encryption-at-rest/in-transit,loss prevention (DLP),and access controls in accordance with NDPA,GDPR,and enterprise policies.\n\n Assess data retention,anonymization,and secure destruction practices across group entities to mitigate data exposure risks.\n\nCloud & Infrastructure Security Governance:\n\n Assess multi-cloud (AWS,Azure) and on-premise environments to verify compliance with identity and access management (IAM),encryption,and network segmentation standards.\n\n Evaluate DevSecOps automation and CI/CD security gating,assuring that infrastructure-as-code deployments adhere to security baselines.\n\nIncident Review & Diagnostic Assurance:\n\n Conduct independent post-incident reviews,forensic audits,and root-cause analyses for severe security events to validate remediation efficacy.\n\n Analyze threat vectors,forensic artifacts,and telemetry logs during investigations to ensure threat containment and control validation.\n\n Review post-incident reports to verify that corrective and preventive action plans (CAPAs) are actionable and fully implemented.\n\nStandards & Compliance Testing:\n\n Establish baseline security compliance checklists for operating systems,containerized environments,and network infrastructure.\n\n Assess adherence to secure coding practices and application security standards across engineering teams.\n\n Execute periodic compliance audits and continuous monitoring assessments to detect,track,and remediate configuration drift.\n\nTooling & Control Effectiveness Evaluation:\n\n Assess the coverage,configuration quality,and operational readiness of core security stack tools (SIEM,EDR,WAF,DLP,and vulnerability management platforms).\n\n Validate the accuracy and coverage of automated threat detection rules,alert logic,and SOC playbooks to minimize false negatives and positives.\n\n Evaluate emerging security technologies and third-party vendor solutions to assure alignment with group security requirements.\n\nRisk Validation & Audit Remediation:\n\n Translate enterprise risk findings,vulnerability assessments,penetration testing results,and regulatory audit findings into prioritized technical remediation roadmaps.\n\n Validate the implementation and operational effectiveness of technical mitigations introduced by engineering teams.\n\n Track,report,and present technical Key Risk Indicators (KRIs),Key Performance Indicators (KPIs),and control maturity metrics to executive leadership and risk committees.\n\nAdvisory & Technical Assurance Guidance:\n\n Deliver technical advisory and mentorship to junior analysts,audit peers,and engineering leads on security controls and risk mitigation strategies.\n\n Conduct independent reviews of security assessment findings,pentest reports,and privacy evaluations alongside development and operations teams.\n\n Drive continuous security assurance awareness across subsidiaries through targeted technical assessment workshops and policy reviews.\n\nSpecification & Qualifications\n\nEducation/Certification:\n\n Bachelor's or Master's Degree in Computer Science, Information Security, or a related field.\n\n Certified Information Systems Security Professional (CISSP)\n\n Certified Ethical Hacker (CEH)\n\n AWS Certified Solution Architect\n\n AWS Certified Security Specialty\n\n Microsoft Certified Azure Security Engineer\n\n OCI Certified Security Professional\n\nExperience:\n\n 6 - 8 years of proven experience in computing and information security, including experience in Fintech, Banking or Mobile Money is preferred\n\n Strong understanding of emerging technologies, cloud computing, and mobile security.\n\n Familiarity with risk management methodologies and techniques.\n\n Excellent leadership and management skills, with the ability to inspire and motivate cross-functional teams.\n\n Demonstrated ability to work in a fast-paced and dynamic environment, balancing multiple priorities and deadline\n\nApplication Closing Date\n\nNot Specified.\n\nHow to Apply\n\nInterested and qualified candidates should:\n\nClick here to apply online","description_format":"text","description_chars":6600,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Investment Holding Companies"],"lifecycle":[{"event":"open","at":"2026-11-09T11:16:45Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["seen:0","win:early"],"computed_at":"2026-11-09T14:41:26Z"},"pay":null,"html_url":"https://alion.io/job/vfd-group-senior-security-engineer","json_url":"https://alion.io/job/vfd-group-senior-security-engineer.json","meta":{"generated_at":"2026-11-09T14:41:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20271,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":62388},"rest":"https://alion.io/mcp/rest/get_company?id=62388"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvfd-group-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvfd-group-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvfd-group-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vfd-group-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvfd-group-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3960429}},{"tool":"search_jobs","arguments":{"company":"vfdgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3960429},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}