Analysts at Moniepoint Inc.

• The Threat Intelligence Analyst will support Moniepoint’s security operations by monitoring, analyzing, and reporting on emerging cyber threats targeting the financial sector. This role is ideal for early-career cybersecurity professionals looking to build hands-on experience in threat intelligence, OSINT, and adversary analysis within a fast-paced fintech environment.
• The analyst will work closely with SOC, Fraud Operations, Product Security and other relevant stakeholders to translate threat data into actionable intelligence.

Key Responsibilities
Threat Monitoring & Collection

• Monitor open-source, dark web, and underground forums for threats relevant to Moniepoint and the financial sector
• Track ransomware groups, stealer malware, phishing campaigns, brand impersonation, and fraud-related threats
• Collect Indicators of Compromise (IOCs) including domains, IPs, URLs, hashes, and malicious infrastructure

Analysis & Intelligence Production

• Perform basic triage and analysis of threat data to determine relevance and risk
• Assist in identifying adversary tactics, techniques, and procedures (TTPs)
• Support mapping of threats to MITRE ATT&CK where applicable
• Contribute to daily, weekly, and ad-hoc threat intelligence reports

Stakeholder Support

• Share relevant intelligence with relevant stakeholders
• Assist in validating alerts and external threat reports
• Support investigations related to phishing, account takeover, and third-party risks

Documentation & Continuous Improvement

• Maintain threat logs, actor profiles, and intelligence repositories
• Document analytical findings clearly and concisely
• Learn and apply CTI frameworks, tools, and best practices

Support Incident Response & Vulnerability Management Units

• Assist in Incident Response tasks and post-incident analysis when needed.
• Assist in Threat Intelligence tasks from internal and external sources when needed.
• Conduct regular vulnerability scans and assessments on networks, systems, and applications.
• Analyze scan results to identify vulnerabilities, potential risks and ensure timely remediation.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field
• Good understanding of cybersecurity concepts (malware, phishing, ransomware, fraud)
• Familiarity with OSINT concepts and publicly available intelligence sources
• Strong analytical and critical-thinking skills
• Good written communication skills with attention to detail

Preferred / Nice-to-Have

• 3 - 5 years of Experience in SOC, IR or Threat Intelligence
• Familiarity with MITRE ATT&CK, Pyramid of Pain, or Diamond Model
• Good knowledge of SIEM, EDR, Threat Intelligence Tools, OSINT Tools.
• Exposure to fintech or financial-sector threats is a good advantage.
• Certifications such as Security+,EC-Council CTIA

go to method of application »

Role Overview:

• We are seeking a motivated and detail-oriented  Vulnerability Management Engineer to join our Information Security team. This role is responsible for executing key functions across the vulnerability management lifecycle - from discovery and assessment to remediation tracking and reporting - to enhance the organization’s overall security posture.
• This is an entry-level role designed for candidates looking to build hands-on experience in vulnerability management, working closely with senior security engineers, IT teams, and product teams.

Key Responsibilities

Vulnerability Discovery and Assessment

• Execute and monitor periodic vulnerability scans across internal infrastructure and cloud platforms.
• Conduct periodic scans to support compliance requirements.
• Perform External Attack Surface Assessments on internet-facing assets.
• Assist in validating scan results and identifying false positives.

Analysis, Prioritization, and Reporting

• Analyze Vulnerability scan results to identify security gaps and potential threats.
• Prioritise Vulnerability scan report based on risk severity and business impact.
• Report findings to asset owners and relevant stakeholders for timely remediation.

Remediation and Tracking

• Collaborate with IT, System Administrators, and Product Teams to ensure vulnerabilities are remediated within defined Service Level Agreements (SLAs).
• Track remediation progress and follow up on outstanding vulnerabilities.
• Support implementation of mitigation strategies where immediate remediation is not possible.

Risk Management

• Assist in performing risk assessments related to identified vulnerabilities.
• Support documentation of risks and contribute to mitigation planning.
• Maintain awareness of evolving risk posture across systems.

Security Tools and Technologies

• Support the operation and maintenance of vulnerability management tools.
• Assist in scan configuration, execution, result interpretation and reporting.

Compliance and Standards

• Support vulnerability management activities aligned with standards such as PCI-DSS, ISO 27001, and NIST.
• Assist with audit preparation, including evidence gathering and documentations.
• Ensure scanning and remediation practices meet compliance requirements.

Reporting and Metrics

• Assist in creating dashboards and reports to visualize vulnerability trends, risk posture, and remediation performance.
• Maintain accurate records of vulnerabilities, remediation status, and scan history.
• Communicate findings clearly to both technical and non-technical stakeholders.
• Suggest improvements to scanning, reporting, and remediation workflows.

Support Incident Response & Threat Intelligence Units

• Assist in Incident Response tasks and post-incident analysis when needed.
• Assist in Threat Intelligence tasks from internal and external sources when needed.
• Track emerging threats, vulnerabilities, and tactics used by relevant threat actors.
• Contribute to threat briefings and recommendations for security controls.

Continuous Learning and Improvement

• Stay current with emerging vulnerabilities, threats, and cybersecurity trends.
• Participate in training, labs, and knowledge-sharing sessions.
• Continuously develop technical skills in security tools and methodologies.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Good understanding of vulnerability management lifecycle, vulnerability scanning/patch management tools, SIEM, EDR, CSPM  is an advantage.
• Understanding of networking fundamentals, operating systems, and cloud concepts.
• Strong analytical and problem-solving skills.
• Ability to work collaboratively and willingness to learn.

Preferred (Nice to Have)

• Entry-level certifications such as CompTIA Security+, ISC2 (CC), BTL1, eJPT
• Familiarity with Linux/Windows environments and cloud platforms (AWS, or GCP).
• Hands-on lab, internship, or project experience in security operations or vulnerability assessment.