Application Security Engineer

Placements24; Windsor Park (TN); Hybrid; USD 37,000 - 55,000; Full time

Job summary

Placements24 is seeking an Application Security Engineer for a hybrid role in East London, Eastern Cape. You will partner with development teams to embed security throughout the SDLC, conduct security testing, and help build robust, secure software products.

The ideal candidate has 3–5 years in application security, strong knowledge of secure coding practices, experience with SAST/DAST/IAST, and proficiency in Java, Python, C#, or JavaScript.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related field.
• 3–5 years of experience in application security or secure software development.
• Strong knowledge of secure coding principles and OWASP Top 10.
• Experience with SAST, DAST, and IAST tools.
• Proficiency in Java, Python, C#, or JavaScript.
• Familiarity with AWS/Azure/GCP and Docker/Kubernetes.
• Certifications such as CSSLP, GWAPT, or CEH are a plus.

Responsibilities

• Embed security into the SDLC with DevSecOps practices.
• Perform security reviews of designs and code.
• Conduct SAST, DAST, and penetration testing.
• Identify and triage security vulnerabilities with remediation.
• Develop and maintain secure coding guidelines.
• Automate security testing in CI/CD pipelines.
• Provide security training to development teams.
• Stay updated on application security threats.
• Assist incident response for application security breaches.
• Contribute to security tools and frameworks.

Skills

Secure coding

OWASP Top 10

Analytical thinking

Collaboration

Java

Python

Education

Bachelor's degree

Tools

SAST

DAST

IAST

Job description

About the Role

Our client, a leading software development company in East London, Eastern Cape , is seeking a skilled Application Security Engineer to join their innovative team. This role is critical for ensuring the security of the software products developed by the company, from design through deployment. You will work closely with development teams to integrate security practices into the software development lifecycle (SDLC), conduct security testing, and identify and mitigate vulnerabilities. This hybrid position allows for a blend of in-office collaboration and remote work flexibility. We are looking for a passionate individual with a strong understanding of secure coding practices and application security principles to help build robust and secure applications.

Key Responsibilities

• Collaborate with development teams to embed security into the SDLC, promoting DevSecOps principles.
• Conduct security reviews of application designs and code.
• Perform security testing, including static application security testing (SAST), dynamic application security testing (DAST), and penetration testing of applications.
• Identify, triage, and track security vulnerabilities, working with developers to ensure timely remediation.
• Develop and maintain secure coding guidelines and best practices.
• Automate security testing processes within CI/CD pipelines.
• Provide security training and guidance to development teams.
• Stay up-to-date with emerging application security threats and vulnerabilities.
• Assist in incident response efforts related to application security breaches.
• Contribute to the development and maintenance of security tools and frameworks.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related field.
• Minimum of 3-5 years of experience in application security, software development with a security focus, or cybersecurity.
• Strong understanding of secure coding principles and common vulnerabilities (e.g., OWASP Top 10).
• Experience with SAST, DAST, and IAST tools.
• Proficiency in at least one programming language (e.g., Java, Python, C#, JavaScript).
• Familiarity with security aspects of cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration abilities, essential for working with development teams.
• Ability to work effectively in a hybrid environment in East London, Eastern Cape .
• Relevant certifications such as CSSLP, GWAPT, or CEH are a plus.

Benefits

• Our client offers a competitive salary, comprehensive benefits package, and opportunities for professional growth and skill development.
• The hybrid work model provides flexibility, and the company fosters a collaborative and innovative work culture.
• Join a team dedicated to building secure and high-quality software solutions in East London, Eastern Cape .