Mama Money

Mama Money

Mama Money is the world's first Social Business Money Transfer Operator, offering safe, fast, and low-cost international money transfers for migrant communities.

Diversified Financial Services
201-500
Founded 2013

Description

  • Own security for public and partner APIs, including authentication, secrets handling, request signing, rate limiting and input validation.
  • Threat-model new partner integrations before launch and review existing integrations for security risks.
  • Monitor third-party calls and API traffic for anomalies, failures and traceability.
  • Manage the WAF, bot mitigation and DDoS protections while minimizing customer-impacting false positives.
  • Investigate security alerts and lead security incidents, maintaining incident-response plans and tabletop exercises.
  • Embed security into software delivery through code reviews, dependency and secrets scanning, and SAST/DAST pipelines.
  • Run penetration tests and drive remediation through closure.
  • Assess and continuously review the security posture of partners and vendors.
  • Oversee the outsourced endpoint-security provider, including standards, SLAs, reporting and remediation.
  • Own ISO 27001 ISMS security controls, support audits, maintain regulatory alignment, and lead access reviews, security awareness and security documentation.

Requirements

  • 6+ years of information security experience, including at least 3 years in application, API or cloud security.
  • Hands-on API security expertise with OAuth 2.0, OIDC, JWT, mTLS, request signing and the OWASP API Security Top 10.
  • Practical AWS security experience with IAM, KMS, CloudTrail, GuardDuty, Security Hub and WAF.
  • Experience threat modelling systems and reviewing code for security vulnerabilities.
  • Experience scoping penetration tests and driving remediation.
  • Experience leading incident response from detection through post-mortem.
  • Experience managing an outsourced security provider against defined standards.
  • Python or Bash scripting ability to automate checks and collect evidence.
  • Hold, or be working toward, a relevant certification such as CISSP, CISM, OSCP, OSWE, GWAPT or AWS Certified Security – Specialty.
  • Available as the after-hours escalation point for security incidents.
  • Experience in regulated payments or banking environments, including FSCA, SARB or FIC exposure (preferred).
  • PCI DSS, ISO 27001 implementation or audit, SIEM/detection engineering, Kubernetes/container security, or Terraform/infrastructure-as-code experience (preferred).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Detection Engineer

SentinelOne 1001-5000 Internet Software & Services

SentinelOne is seeking a Senior Detection Engineer to develop and optimize production threat detections across endpoint, cloud, network, and third-party data sources for its AI-native cybersecurity platform.

AWS Azure CI/CD Cybersecurity Git Linux Python SIEM
8 hours, 56 minutes ago

Platform Security Engineer

Fly.io 11-50 Internet Software & Services

Fly.io is hiring a senior Platform Security Engineer to harden Linux-based VM and host isolation across its globally distributed cloud platform and reduce the impact of potential guest-to-host escapes.

Cybersecurity
10 hours, 56 minutes ago

AI-Native Detection and Triage Engineer

Fly.io 11-50 Internet Software & Services

Fly.io is seeking a security detection engineer to unify fleet and code security signals into an agentic triage pipeline that identifies, investigates, and drives resolution of isolation threats across its global cloud platform.

Elixir Go Linux LLM Rust SIEM
10 hours, 56 minutes ago

Network Security Engineer

FireMon.com 201-500 Professional Services

FireMon is seeking a hands-on Network Security Engineer to develop, test, and support integrations that enable its network security policy management platform to work across enterprise security devices and environments.

Cisco Juniper Network Security
11 hours, 11 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers