Senior Application Security Specialist

Placements24; Kimberley; Híbrido; CAD 120.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Health, dental, and vision insurance

Descripción de la vacante

Placements24 in Kimberley, Canada, is seeking a Senior Application Security Specialist to champion secure software development across the organization. This hybrid role embeds security throughout the SDLC, working with development teams to identify and mitigate vulnerabilities in web and mobile apps.

The ideal candidate has deep knowledge of OWASP Top 10, secure coding practices, and proven experience in security reviews and penetration testing.

Formación

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.
• Minimum of 4 years of experience in application security, secure software development, or penetration testing.
• Proven experience in security code reviews and application penetration testing.
• Deep understanding of common web and mobile vulnerabilities (OWASP Top 10).
• Familiarity with secure coding principles and frameworks.
• Experience with security testing tools (SAST, DAST, IAST, SCA).
• Knowledge of cryptography, authentication, and authorization mechanisms.
• Strong programming skills in Java, Python, JavaScript, or C#.
• Excellent communication and collaboration skills.
• Relevant certifications like CSSLP, CEH (AppSec track), or OSCP are beneficial.
• This role requires a hybrid work model in Kimberley, Northern Cape, ZA.

Responsabilidades

• Integrate security into the entire SDLC, including threat modeling and secure design reviews.
• Conduct security code reviews to identify vulnerabilities and provide remediation guidance to developers.
• Perform application penetration testing to discover and exploit security weaknesses.
• Develop and maintain secure coding guidelines and best practices.
• Provide training and guidance to development teams on app security.
• Evaluate and implement security tools (SAST, DAST, IAST, SCA).
• Respond to and investigate application security incidents.
• Stay current with emerging app security threats, vulnerabilities, and technologies.
• Collaborate with product managers, developers, and QA engineers to deliver secure software.

Conocimientos

Security reviews

Penetration testing

Threat modeling

Secure coding

Programming Java

Programming Python

JavaScript

C#

Educación

Bachelor's degree in CS/Engineering/Cybersecurity

Herramientas

SAST

DAST

IAST

SCA

Descripción del empleo

About the Role Our client, a leading innovator in financial technology based in **Kimberley**, is seeking a Senior Application Security Specialist to champion secure software development practices across their organization. This role is instrumental in embedding security throughout the software development lifecycle (SDLC), from design and coding to testing and deployment. You will work closely with development teams to identify, assess, and mitigate security vulnerabilities in web and mobile applications. The ideal candidate will have a strong understanding of common application security risks, secure coding principles, and the ability to conduct thorough security code reviews and penetration tests. This position offers a hybrid work arrangement, combining remote flexibility with in-office collaboration at our **Kimberley, Northern Cape, ZA** facility.

Key Responsibilities

• Integrate security practices into the entire SDLC, including threat modeling, security requirements gathering, and secure design reviews.
• Conduct security code reviews to identify vulnerabilities and provide remediation guidance to developers.
• Perform application penetration testing to discover and exploit security weaknesses.
• Develop and maintain secure coding guidelines and best practices for various programming languages and frameworks.
• Provide training and guidance to development teams on application security best practices.
• Evaluate and implement security tools, such as SAST, DAST, and IAST, to automate security testing.
• Respond to and investigate application security incidents.
• Stay current with emerging application security threats, vulnerabilities, and technologies.
• Collaborate with product managers, developers, and QA engineers to ensure the delivery of secure software.

Requirements

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.
• Minimum of 4 years of experience in application security, secure software development, or penetration testing.
• Proven experience in performing security code reviews and application penetration testing.
• Deep understanding of common web and mobile application vulnerabilities (e.g., OWASP Top 10).
• Familiarity with secure coding principles and frameworks.
• Experience with security testing tools (SAST, DAST, IAST, SCA).
• Knowledge of cryptography, authentication, and authorization mechanisms.
• Strong programming skills in one or more languages relevant to the client's stack (e.g., Java, Python, JavaScript, C#).
• Excellent communication, collaboration, and problem-solving skills.
• Relevant certifications like CSSLP, CEH (AppSec track), or OSCP are beneficial.
• This role requires a hybrid work model in **Kimberley, Northern Cape, ZA**.

Benefits

• An attractive annual salary of ** R**.
• Hybrid work model offering a balance of remote and office-based work.
• Comprehensive health, dental, and vision insurance.
• Contributions to a retirement fund.
• Opportunities for continuous learning, professional development, and advanced training.
• Performance-based bonuses.
• A dynamic and innovative work environment in **Kimberley**.