Information Security Specialist - Application Security

Placements24; Lorenziberg; Hybride; EUR 48 000 - 70 000; Plein temps

Résumé du poste

Placements24 seeks an Information Security Specialist focused on Application Security to embed security into the SDLC. You will assess applications, identify vulnerabilities, and drive secure coding practices with development teams.

The role requires 4+ years in software or app security, experience with Burp Suite/OWASP ZAP/Veracode, and knowledge of OWASP Top 10. Hybrid work model in Queenstown, SA.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or related field.
• 4+ years of experience in software development or application security.
• Strong understanding of web vulnerabilities (SQLi, XSS, CSRF) and mitigations.
• Experience with Burp Suite, OWASP ZAP or Veracode.
• CI/CD and DevSecOps familiarity; cloud security concepts a plus.
• Certifications like CSSLP, GWAPT or GWEB are advantageous; eligible to work in SA.

Responsabilités

• Conduct security reviews of application designs and code.
• Perform vulnerability assessments and penetration testing on web and mobile apps.
• Identify and document application security risks and provide remediation guidance.
• Collaborate with development teams to integrate security into the SDLC (DevSecOps).
• Develop and implement secure coding guidelines and best practices.
• Educate developers on application security principles and common vulnerabilities.
• Assist in selecting and implementing app security tools (SAST, DAST, IAST).
• Respond to and investigate application security incidents.
• Stay current with emerging application security threats and technologies.
• Contribute to security testing frameworks and automation.

Connaissances

Application security

DevSecOps

Secure coding

Vulnerability assessment

Penetration testing

OWASP Top 10

CI/CD

Cloud security

Communication

Formation

Bachelor's degree in CS/SE/related field

Outils

Burp Suite

OWASP ZAP

Veracode

Description du poste

About the Role

Our client, a rapidly growing software development company, is seeking an experienced Information Security Specialist with a focus on Application Security (AppSec). This role is crucial for integrating security best practices throughout the software development lifecycle (SDLC), from design to deployment. You will be responsible for conducting security assessments of applications, identifying vulnerabilities, and collaborating with development teams to ensure secure coding practices are followed. The position is based in our client's development center in Queenstown, Eastern Cape, with a hybrid work model. We are looking for a security-minded developer or security professional with a strong understanding of web application vulnerabilities and secure coding techniques. This is an excellent opportunity to make a significant impact on the security of software products in a dynamic and innovative company.

Key Responsibilities

• Conduct security reviews of application designs and code.
• Perform vulnerability assessments and penetration testing on web and mobile applications.
• Identify and document application security risks and provide actionable remediation guidance.
• Collaborate with development teams to integrate security into the SDLC (DevSecOps).
• Develop and implement secure coding guidelines and best practices.
• Educate developers on application security principles and common vulnerabilities (e.g., OWASP Top 10).
• Assist in the selection and implementation of application security tools (SAST, DAST, IAST).
• Respond to and investigate application security incidents.
• Stay current with emerging application security threats and technologies.
• Contribute to the development of security testing frameworks and automation.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, or a related field.
• Minimum of 4 years of experience in software development or application security.
• Strong understanding of common web application vulnerabilities (e.g., SQL Injection, XSS, CSRF) and mitigation techniques.
• Experience with security testing tools such as Burp Suite, OWASP ZAP, or Veracode.
• Knowledge of secure coding practices in languages such as Java, Python, C#, or JavaScript.
• Familiarity with CI/CD pipelines and DevSecOps principles.
• Understanding of cloud security concepts as they relate to applications is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills, with the ability to work effectively with development teams.
• Relevant certifications like CSSLP, GWEB, or GWAPT are advantageous.
• Must be eligible to work in South Africa.

Benefits

Our client offers a competitive salary, comprehensive medical aid, a pension fund, and opportunities for professional growth and development. The Queenstown, Eastern Cape office provides a collaborative and supportive work environment. The hybrid model ensures a good work-life balance. Employees benefit from training in the latest AppSec tools and methodologies, as well as opportunities to attend industry conferences. Our client is committed to fostering a culture of security ownership and provides ample resources for skill enhancement. There are clear opportunities for career advancement within the growing cybersecurity team. Additional benefits include regular team-building activities and access to wellness programs. The company encourages innovation and values employee contributions to product security.