Senior Security Engineer

Who you are

• You can work remotely from anywhere (between UTC -5 and +4) with reliable internet access
• Yearly travel to one of our African operating countries
• Minimum of 7-8 years of professional experience with a minimum of 3-5 years of it spent in a security-related role
• Strong Experience with Python
• Fluent English

What the job involves

• We’re looking for an experienced security engineer who’s independent, excited about getting things done, and ready to hit the ground running
• You'll primarily be responsible for our application security, working with our product teams to work on new systems to enhance our security posture
• Our customers trust us with their money, and you’ll be at the forefront of making sure we retain that trust!
• This broadly scoped role will allow you to get your hands on many different types of security projects, from direct application security to helping our infrastructure team think about security for our databases
• As we integrate AI-powered agents into our engineering and operations workflows, you'll help define and enforce the guardrails around how we use them safely
• This includes securing agentic tooling against prompt injection, excessive permissions, and data exfiltration — and building the policies and technical controls to govern AI usage across the company
• Some experience with common industry certifications like ISO-27001 and PCI-DSS would be beneficial, although you won’t be expected to run or oversee audits
• Design our agentic SIEM/SecOps pipelines to evaluate and tune AI-driven triage, alerting, and response automation
• Secure our MCP integrations against prompt injection, tool misuse, and credential exposure
• Tune and maintain code security review agents tailored to Wave's codebase, threat model, and regulatory environment
• Develop internal AI governance standards covering acceptable use, data handling, and audit requirements for LLM-powered tools
• Centralise application-level login and permissions enforcement including privileged access management
• Rework our approach to secrets management with ephemeral secrets and tighter access scopes
• Security review of our public-facing APIs

Benefits

• Subsidised health insurance for you and your dependents (vary from country to country)
• 6 months fully paid parental leave and subsidized fertility assistance
• Flexible vacation, with most folks taking between 30-40 days per year
• $10,000 annual charitable donation matching
• Retirement contributions (vary from country to country)
• Yearly travel to one of our African operating countries