Information Security Specialist - Application Security

Placements24; O Mente; Híbrido; EUR 30.000 - 49.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical aid

Retirement contributions

Professional development

Security certifications support

Hybrid work arrangement

Descripción de la vacante

Placements24 is seeking an Information Security Specialist focused on Application Security to join our client’s team in Queenstown, Eastern Cape. You will embed security into the software development lifecycle, perform SAST/DAST testing, and remediate vulnerabilities across applications.

The ideal candidate has 3+ years in information security, strong secure coding knowledge, and experience with Veracode, Checkmarx, and Burp Suite. Hybrid working arrangement offered.

Formación

• 3+ years in information security with focus on application security.
• Strong knowledge of SDLC and secure coding principles.
• Experience with SAST/DAST tools and remediation.
• Familiarity with cloud security (AWS/Azure) and containers.
• Programming experience in Java, Python, or C#.

Responsabilidades

• Embed security into SDLC from design to deployment.
• Perform SAST/DAST testing and remediation guidance.
• Collaborate with developers to implement secure coding practices.
• Develop and maintain application security standards.
• Conduct threat modeling for applications.
• Educate teams on OWASP Top 10 and secure coding.
• Review third-party components for security.
• Stay current with app security threats.

Conocimientos

Secure coding practices

Threat modeling

Vulnerability analysis

Communication

Problem solving

Educación

Bachelor's degree in Computer Science or related field

Herramientas

Veracode

Checkmarx

Burp Suite

Descripción del empleo

About the Role

Our client, a growing software development firm, is seeking an Information Security Specialist with a focus on Application Security. This role, located in Queenstown, Eastern Cape , is vital for ensuring the security of our client's software products throughout the development lifecycle. You will work closely with development teams to embed security best practices, conduct security testing, and remediate vulnerabilities in applications. The ideal candidate will have a strong understanding of secure coding principles, common application vulnerabilities, and security testing methodologies. This is an excellent opportunity to contribute to building secure software from the ground up.

Key Responsibilities

• Integrate security into the software development lifecycle (SDLC), from design to deployment.
• Conduct threat modeling for new and existing applications.
• Perform static (SAST) and dynamic (DAST) application security testing.
• Identify, analyze, and prioritize application security vulnerabilities.
• Work with developers to remediate identified vulnerabilities and provide guidance on secure coding practices.
• Develop and maintain application security standards and guidelines.
• Educate development teams on secure coding principles and common threats (e.g., OWASP Top 10).
• Assist in security reviews of third-party components and libraries.
• Contribute to the development and maintenance of security testing tools and frameworks.
• Stay current with emerging application security threats and vulnerabilities.
• Support incident response activities related to application security breaches.
• Participate in code reviews from a security perspective.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, or a related field; relevant security certifications (e.g., CSSLP, GWAPT) are advantageous.
• Minimum of 3 years of experience in information security, with a specialization in application security.
• Strong understanding of secure software development principles and methodologies (SDLC, Agile).
• Hands-on experience with SAST and DAST tools (e.g., Veracode, Checkmarx, Burp Suite).
• Knowledge of common web application vulnerabilities and their mitigation techniques.
• Proficiency in at least one programming language (e.g., Java, Python, C#).
• Familiarity with security in cloud environments (AWS, Azure) and container technologies.
• Excellent analytical, problem-solving, and communication skills.
• Ability to collaborate effectively with development teams and stakeholders.
• Experience with API security testing and understanding of authentication/authorization mechanisms.

Benefits

• Our client offers a competitive salary and benefits package, including medical aid and retirement contributions.
• We provide opportunities for professional development, including training courses and support for security certifications.
• This role is based at our office in Queenstown, Eastern Cape , with a flexible hybrid work arrangement.
• You'll be part of a collaborative and innovative team focused on delivering high-quality, secure software.
• We are committed to fostering a positive work environment and supporting our employees' professional growth and well-being.