Information Security Specialist - Application Security

Placements24; Queenstown (MD); Hybrid; USD 25,000 - 43,000; Full time

Benefits offered by this job

Medical aid

Retirement contributions

Flexible hybrid work

Job summary

Placements24 is hiring an Information Security Specialist focused on application security in Queenstown. You’ll embed security into the SDLC, model threats, run SAST/DAST, and guide developers on secure coding. Experience with AWS/Azure and common tools is expected.

The role emphasizes collaboration, secure design, and ongoing security improvements across software projects. Hybrid work is available.

Qualifications

• Bachelor’s degree in CS or related field with security focus preferred.
• Minimum 3 years in information security with application security focus.
• Solid understanding of secure coding and SDLC processes.

Responsibilities

• Embed security into the SDLC from design to deployment.
• Perform threat modeling and vulnerability triage.
• Conduct SAST/DAST testing and remediate findings.
• Guide developers on secure coding practices and standards.
• Collaborate with teams on secure architecture and reviews.

Skills

Secure SDLC

SAST/DAST

OWASP Top 10

AWS/Azure

Java/Python/C#

Communication

Education

Bachelor's degree

Tools

Veracode

Checkmarx

Burp Suite

Job description

About the Role

Our client, a growing software development firm, is seeking an Information Security Specialist with a focus on Application Security. This role, located in Queenstown, Eastern Cape , is vital for ensuring the security of our client's software products throughout the development lifecycle. You will work closely with development teams to embed security best practices, conduct security testing, and remediate vulnerabilities in applications. The ideal candidate will have a strong understanding of secure coding principles, common application vulnerabilities, and security testing methodologies. This is an excellent opportunity to contribute to building secure software from the ground up.

Key Responsibilities

• Integrate security into the software development lifecycle (SDLC), from design to deployment.
• Conduct threat modeling for new and existing applications.
• Perform static (SAST) and dynamic (DAST) application security testing.
• Identify, analyze, and prioritize application security vulnerabilities.
• Work with developers to remediate identified vulnerabilities and provide guidance on secure coding practices.
• Develop and maintain application security standards and guidelines.
• Educate development teams on secure coding principles and common threats (e.g., OWASP Top 10).
• Assist in security reviews of third-party components and libraries.
• Contribute to the development and maintenance of security testing tools and frameworks.
• Stay current with emerging application security threats and vulnerabilities.
• Support incident response activities related to application security breaches.
• Participate in code reviews from a security perspective.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, or a related field; relevant security certifications (e.g., CSSLP, GWAPT) are advantageous.
• Minimum of 3 years of experience in information security, with a specialization in application security.
• Strong understanding of secure software development principles and methodologies (SDLC, Agile).
• Hands-on experience with SAST and DAST tools (e.g., Veracode, Checkmarx, Burp Suite).
• Knowledge of common web application vulnerabilities and their mitigation techniques.
• Proficiency in at least one programming language (e.g., Java, Python, C#).
• Familiarity with security in cloud environments (AWS, Azure) and container technologies.
• Excellent analytical, problem-solving, and communication skills.
• Ability to collaborate effectively with development teams and stakeholders.
• Experience with API security testing and understanding of authentication/authorization mechanisms.

Benefits

Our client offers a competitive salary and benefits package, including medical aid and retirement contributions. We provide opportunities for professional development, including training courses and support for security certifications. This role is based at our office in Queenstown, Eastern Cape , with a flexible hybrid work arrangement. You'll be part of a collaborative and innovative team focused on delivering high-quality, secure software. We are committed to fostering a positive work environment and supporting our employees' professional growth and well-being.