{"id":2424759,"url":"https://alion.io/job/wave-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":65,"name":"Wave","domain":"wave.com","url":"https://alion.io/company/wave","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":79,"open_postings":8,"ghost_share":0,"stale_share":0.625,"repost_share":0,"time_to_fill_p50_days":64,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"UTC-5 – UTC+4","utc_offset_min":-5,"utc_offset_max":4},"hiring_geo_confidence":"structured","locations":["United Kingdom"],"countries":["GB"],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":{"min":null,"max":185800,"currency":"USD","period":"year","gross":null,"usd_annual":185800},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Stripe","optional":false},{"name":"GCP","optional":true},{"name":"GraphQL","optional":true},{"name":"JavaScript","optional":true},{"name":"Jetpack Compose","optional":true},{"name":"Kotlin","optional":true},{"name":"Kubernetes","optional":true},{"name":"Mypy","optional":true},{"name":"PostgreSQL","optional":true},{"name":"React.js","optional":true},{"name":"Swift","optional":true},{"name":"SwiftUI","optional":true},{"name":"Terraform","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-13T06:17:52Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-13T07:11:43Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Our mission\nWe're making Africa the first cashless continent.\nIn 2017, over half the population in Sub-Saharan Africa had no bank account. That's for good reason-the fees are too high, the closest branch can be miles away, and nobody takes cards. Without access to financial institutions, people are forced to keep their savings under the mattress. Small business owners rely on lenders who charge extortionate rates. Parents spend hours waiting in line to pay school fees in cash.\nWe're solving this by building financial services that just work: no account fees, instantly available, and accepted everywhere. In places where electricity, water and roads don't always work, you can still send money with Wave. In 2017, we launched a mobile app in Senegal for cash deposit, withdrawal, and peer-to-peer and business payments. Now, we have millions of users across 9 countries and are growing fast.\nOur goal is to make Africa the first cashless continent and that's where you come in...\nHow you'll help us achieve it\nWe’re looking for an experienced security engineer who’s independent, excited about getting things done, and ready to hit the ground running. You'll primarily be responsible for our application security, working with our product teams to work on new systems to enhance our security posture. Our customers trust us with their money, and you’ll be at the forefront of making sure we retain that trust!\nThis broadly scoped role will allow you to get your hands on many different types of security projects, from direct application security to helping our infrastructure team think about security for our databases. \nAs we integrate AI-powered agents into our engineering and operations workflows, you'll help define and enforce the guardrails around how we use them safely. This includes securing agentic tooling against prompt injection, excessive permissions, and data exfiltration - and building the policies and technical controls to govern AI usage across the company.\nSome experience with common industry certifications like ISO-27001 and PCI-DSS would be beneficial, although you won’t be expected to run or oversee audits.\nOur to-do list changes constantly, but here are some recent projects:\nDesign our agentic SIEM/SecOps pipelines to evaluate and tune AI-driven triage, alerting, and response automation\nSecure our MCP integrations against prompt injection, tool misuse, and credential exposure\nTune and maintain code security review agents tailored to Wave's codebase, threat model, and regulatory environment\nDevelop internal AI governance standards covering acceptable use, data handling, and audit requirements for LLM-powered tools\nCentralise application-level login and permissions enforcement including privileged access management\n Rework our approach to secrets management with ephemeral secrets and tighter access scopes\nSecurity review of our public-facing APIs\nKey details\nYou can work remotely from anywhere (between UTC -5 and +4) with reliable internet access.\nWave covers travel once per year to one of our operating countries in Africa, as well as a yearly stipend of $1200 to meet with coworkers.\nOur salaries are competitive and are calculated using a transparent formula. For this role, depending on your level of experience, we offer a salary of up to $185,800 USD (or local equivalent), plus a generous equity.\nWe run performance reviews twice a year and award bonuses or promotions to strong performers who have been with the company for more than six months\nMajor benefits:\nSubsidized health insurance for you and your dependents and retirement contributions (both vary from country-to-country).\n6 months fully paid parental leave and subsidized fertility assistance.\nFlexible vacation, with most folks taking between 30-40 days per year.\n$10,000 annual charitable donation matching.\nYearly travel to one of our African operating countries.\nRequirements\nMinimum of 7-8 years of professional experience with a minimum of 3-5 years of it spent in a security-related role\nStrong Experience with Python.\nFluent English.\nYou might be a good fit if you\nAre excited about finding the right balance between security and velocity. \nHave opinions on how to secure agentic AI systems and want to put them into practice\nEnjoy helping other engineers understand and implement secure patterns.\nAre not afraid to take on complicated systems.\nAre excited to work on lots of different security-related work, from audits to code refactors. \nWork to make things easier for the next engineer who will touch your code.\nAlways try to improve as a programmer and colleague.\nAre interested in building governance frameworks for AI usage in a regulated financial services environment\nHave experimented with LLM-based security tooling and understand both the promise and the failure modes\nPush through hard problems without giving up.\nHave experience remediating non-conformities.\nAre interested in security-focused source code review and penetration testing.\nHave an interest in growing and mentoring a team.\nAbout Engineering at Wave\nYou'll report to the Security Team Lead and work closely with the CISO, as part of a small 4 person security team, likely rotating with many of our Product and Platform teams, depending on the project you’re working on. Each team is led by a product manager and mentored by a technical lead on the team.\nYou’ll be responsible for your own security projects as well as supporting the engineering organisation on security through advice and design review. We organize things to give you as much ownership as possible, so you'll typically be in charge of your projects from planning to delivery.\nOur stack (you only need prior experience with python and cloud technologies, if you need to work with anything else, we’ll train you):\nbackend: Python 3 (+ mypy)\nAPI layer: GraphQL\nAndroid frontend: Kotlin/Jetpack\niOS frontend: Swift/SwiftUI\nweb frontend: TypeScript/React\ndatabase: Postgres\ninfrastructure: GCP / Terraform\norchestration: Kubernetes\nOur team\nWe have a rapidly growing in-country team in Senegal, Côte d'Ivoire, Mali, Burkina Faso, The Gambia, Uganda, Niger, Sierra Leone, and Cameroon plus remote team members spread across the world.\nWe're deeply passionate about our mission of bringing radically affordable financial services to the people who need them most.\nWe foster autonomy for our employees. You'll own your projects at every stage, from understanding the problem to monitoring your solution in production.\nWe raised the largest Series A in Africa in 2021. Our world-class investors, include Founders Fund, Sequoia Heritage, Stripe, Ribbit Capital, Y Combinator, and Partech Africa.\nWe are on Y Combinator's top companies by revenue.\nHow to apply\nFill out the form below, and upload a resume in English and a cover letter describing your interest in Wave and the role.\nWe review applications frequently and recommend that you apply to the role that most closely aligns with your skills, experience and career goals.\nWave is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.","description_format":"text","description_chars":7129,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Equity","Health insurance","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Payment Processing & Gateways","Money Transfer & Remittances"],"lifecycle":[{"event":"open","at":"2026-10-13T07:11:43Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":64,"reasons":["conf:2","win:early"],"computed_at":"2026-10-13T09:37:52Z"},"pay":{"stated_usd_annual":185800,"is_top_pay":true},"html_url":"https://alion.io/job/wave-senior-application-security-engineer","json_url":"https://alion.io/job/wave-senior-application-security-engineer.json","meta":{"generated_at":"2026-10-13T09:37:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14603,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":65},"rest":"https://alion.io/mcp/rest/get_company?id=65"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwave-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwave-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwave-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wave-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwave-senior-application-security-engineer"}]}