Senior Application Security Engineer

Placements24; Queenstown; Hybrid; NZD 130,000 - 180,000; Full time

Benefits offered by this job

Fully remote

Job summary

Placements24 is seeking a Senior Application Security Engineer to embed security across the SDLC for our remote engineering team serving Queenstown-area clients.

You will identify vulnerabilities, conduct security code reviews, perform threat modeling, and implement secure coding standards in collaboration with developers. A strong background in OWASP Top 10, SAST/DAST/IAST, cloud security concepts, and excellent communication are essential for success.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field.
• Minimum of 5 years of experience in application security or software development with a strong security focus.
• In-depth knowledge of web application security vulnerabilities (OWASP Top 10) and mitigation techniques.
• Experience with security testing tools (SAST, DAST, SCA).
• Proficiency in at least one programming language (Java, Python, C#, JavaScript).
• Understanding of secure SDLC methodologies.
• Familiarity with cloud security concepts (AWS, Azure, GCP) is a plus.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Certifications such as CSSLP or GWAPT are beneficial.

Responsibilities

• Collaborate with development teams to integrate security best practices into the SDLC.
• Conduct security code reviews and identify potential vulnerabilities in application code.
• Perform threat modeling on new features and applications to identify potential security risks.
• Develop and maintain secure coding guidelines and standards.
• Implement and manage security testing tools, including SAST, DAST, and IAST.
• Respond to security inquiries from development teams and provide guidance on remediation.
• Automate security checks and processes within CI/CD pipelines.
• Investigate and address security vulnerabilities reported by internal and external parties.
• Stay current with application security threats, trends, and technologies.
• Contribute to the development of security training for developers.
• Assist in incident response activities related to application security.
• Evaluate and recommend application security tools and technologies.

Skills

Java

Python

C#

JavaScript

OWASP Top 10

Security testing

Threat modeling

CI/CD

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

IAST

Cloud security concepts

Job description

About the Role

Our client, a fast-paced SaaS provider, is seeking a highly skilled Senior Application Security Engineer to join their engineering team. This critical role will focus on embedding security throughout the software development lifecycle (SDLC) for their innovative platforms. Based remotely with a team that engages with clients in Queenstown, Eastern Cape , you will be responsible for identifying and mitigating security vulnerabilities in applications, performing security code reviews, and implementing secure coding practices. The ideal candidate will have a deep understanding of web application security, threat modeling, and secure development principles. This is an excellent opportunity for a security-minded engineer to influence the security of high-impact software products.

Key Responsibilities

• Collaborate with development teams to integrate security best practices into the SDLC.
• Conduct security code reviews and identify potential vulnerabilities in application code.
• Perform threat modeling on new features and applications to identify potential security risks.
• Develop and maintain secure coding guidelines and standards.
• Implement and manage security testing tools, including SAST, DAST, and IAST.
• Respond to security inquiries from development teams and provide guidance on remediation.
• Automate security checks and processes within CI/CD pipelines.
• Investigate and address security vulnerabilities reported by internal and external parties.
• Stay current with application security threats, trends, and technologies.
• Contribute to the development of security training for developers.
• Assist in incident response activities related to application security.
• Evaluate and recommend application security tools and technologies.

Requirements

• Bachelor's degree in Computer Science, Engineering, or a related field.
• Minimum of 5 years of experience in application security or software development with a strong security focus.
• In-depth knowledge of web application security vulnerabilities (e.g., OWASP Top 10) and mitigation techniques.
• Experience with security testing tools (SAST, DAST, SCA).
• Proficiency in at least one programming language (e.g., Java, Python, C#, JavaScript).
• Experience with secure coding principles and practices.
• Understanding of secure SDLC methodologies.
• Familiarity with cloud security concepts (AWS, Azure, GCP) is a plus.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Certifications such as CSSLP or GWAPT are beneficial.

Benefits

Our client offers a competitive salary, comprehensive health benefits, and opportunities for professional development, including advanced training and conferences. This is a fully remote position, offering significant flexibility and work-life balance. You will work with a talented and passionate team, contributing to the security of cutting-edge software solutions. This role provides substantial impact and career growth within a leading technology company that values security expertise, supporting projects and teams servicing the Queenstown area.