Security Engineer - Application Security

Placements24; United States; Hybrid; USD 55,000 - 79,000; Full time

Benefits offered by this job

Hybrid work arrangements

Career growth opportunities

Retirement contributions

Job summary

Placements24 is seeking a skilled Security Engineer specializing in Application Security to join their technology team in Paarl, Western Cape, ZA. You will secure software across the development lifecycle, collaborating with development teams to remediate vulnerabilities and implement secure coding practices.

You will integrate security into CI/CD pipelines, stay ahead of emerging threats, and support security training across engineering functions. Hybrid work is offered.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.
• 3–5 years of experience in application security or related security engineering role.
• Strong understanding of OWASP Top 10 and mitigations.
• Experience with SAST and DAST tools.
• Knowledge of secure coding practices and common programming languages.
• Familiarity with CI/CD tools like Jenkins, GitLab CI, Docker.
• Experience with API security and cloud security concepts.
• Certifications such as CSSLP or GWEB are beneficial.

Responsibilities

• Perform security reviews of designs and code.
• Conduct vulnerability assessments and pen tests on web apps, APIs, and mobile apps.
• Integrate security tests into CI/CD (SAST, DAST, SCA).
• Develop and maintain secure coding guidelines.
• Provide guidance to dev teams on secure coding.
• Investigate and respond to security incidents related to applications.
• Stay current with emerging app security threats.
• Collaborate with product managers, developers, QA to ensure secure delivery.
• Automate security tasks and processes where possible.

Skills

Application security

OWASP Top 10

SAST

DAST

CI/CD

API security

Cloud security

Java

Python

C#

JavaScript

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

Jenkins

GitLab CI

Docker

Job description

About the Role

Our client is seeking a skilled Security Engineer with a specialization in Application Security to join their growing technology team in Paarl, Western Cape, ZA . In this role, you will be responsible for ensuring the security of our client's software applications throughout their development lifecycle. You will work closely with development teams to identify and remediate vulnerabilities, implement secure coding practices, and integrate security into the CI/CD pipeline. This position requires a strong understanding of application security principles, common vulnerabilities, and secure development methodologies. The ideal candidate is passionate about building secure software and driving a security-first mindset within the engineering organization.

Key Responsibilities

• Perform security reviews of application designs and code.
• Conduct vulnerability assessments and penetration testing on web applications, APIs, and mobile applications.
• Integrate security testing tools into the CI/CD pipeline (SAST, DAST, SCA).
• Develop and maintain secure coding guidelines and best practices.
• Provide guidance and training to development teams on secure coding techniques.
• Investigate and respond to security incidents related to applications.
• Assist in the development and maintenance of security policies and procedures for application development.
• Stay current with emerging application security threats and vulnerabilities.
• Collaborate with product managers, developers, and QA engineers to ensure secure software delivery.
• Automate security tasks and processes where possible.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3-5 years of experience in application security, software development, or a related security engineering role.
• Strong understanding of OWASP Top 10 vulnerabilities and mitigation strategies.
• Experience with static (SAST) and dynamic (DAST) application security testing tools.
• Knowledge of secure coding principles and common programming languages (e.g., Java, Python, C#, JavaScript).
• Familiarity with CI/CD tools and practices (e.g., Jenkins, GitLab CI, Docker).
• Experience with API security and cloud security concepts is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Relevant security certifications (e.g., CSSLP, GWEB) are beneficial.

Benefits

• Competitive salary and performance bonuses.
• Comprehensive health and wellness benefits.
• Opportunities for professional growth and certifications in application security.
• A collaborative and innovative work culture in Paarl, Western Cape, ZA .
• Retirement fund contributions.
• Exposure to cutting-edge application development projects.
• Hybrid work arrangements for improved work-life balance.