Hybrid AppSec Engineer: Secure SDLC & DevSecOps

Placements24; Windsor Park (TN); Hybrid; USD 37,000 - 55,000; Full time

Job summary

Placements24 is seeking an Application Security Engineer for a hybrid role in East London, Eastern Cape. You will partner with development teams to embed security throughout the SDLC, conduct security testing, and help build robust, secure software products.

The ideal candidate has 3–5 years in application security, strong knowledge of secure coding practices, experience with SAST/DAST/IAST, and proficiency in Java, Python, C#, or JavaScript.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related field.
• 3–5 years of experience in application security or secure software development.
• Strong knowledge of secure coding principles and OWASP Top 10.
• Experience with SAST, DAST, and IAST tools.
• Proficiency in Java, Python, C#, or JavaScript.
• Familiarity with AWS/Azure/GCP and Docker/Kubernetes.
• Certifications such as CSSLP, GWAPT, or CEH are a plus.

Responsibilities

• Embed security into the SDLC with DevSecOps practices.
• Perform security reviews of designs and code.
• Conduct SAST, DAST, and penetration testing.
• Identify and triage security vulnerabilities with remediation.
• Develop and maintain secure coding guidelines.
• Automate security testing in CI/CD pipelines.
• Provide security training to development teams.
• Stay updated on application security threats.
• Assist incident response for application security breaches.
• Contribute to security tools and frameworks.

Skills

Secure coding

OWASP Top 10

Analytical thinking

Collaboration

Java

Python

Education

Bachelor's degree

Tools

SAST

DAST

IAST

Job description

Placements24 is seeking an Application Security Engineer for a hybrid role in East London, Eastern Cape. You will partner with development teams to embed security throughout the SDLC, conduct security testing, and help build robust, secure software products.

The ideal candidate has 3–5 years in application security, strong knowledge of secure coding practices, experience with SAST/DAST/IAST, and proficiency in Java, Python, C#, or JavaScript.