Application Security (AppSec) Engineer

Placements24; Mbombela (Nelspruit); Hybrid; ZAR 700,000 - 950,000; Full time

Benefits offered by this job

Health benefits

Performance-based bonus

Professional development budget

Job summary

Placements24 is seeking an experienced Application Security Engineer to join our client in Nelspruit, Mpumalanga, with a flexible hybrid work model. You will embed security across the SDLC, conduct security reviews, and remediate vulnerabilities in web and mobile apps.

The ideal candidate has 5+ years in software development or application security, strong OWASP Top 10 knowledge, and hands-on experience with SAST/DAST/IAST tools. Certifications are a plus.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or related field or equivalent practical experience.
• Minimum of 5 years of experience in software development or application security.
• Proven experience in security reviews, vulnerability assessments, and penetration testing of applications.

Responsibilities

• Embed security best practices into the SDLC.
• Conduct security reviews of designs, code and architecture.
• Perform vulnerability assessments and penetration testing.
• Develop and implement security testing frameworks (SAST, DAST, IAST).
• Provide guidance on secure coding principles to developers.

Skills

AppSec

Secure SDLC

OWASP Top 10

Penetration testing

SAST/DAST/IAST

CI/CD security

Java/Python/JS

Education

Bachelor's degree in CS or related

Tools

SAST tools

DAST tools

IAST tools

CI/CD tools

Job description

About the Role

Our client, a rapidly growing software development company, is seeking an experienced Application Security (AppSec) Engineer to join their team in Nelspruit, Mpumalanga . This critical role will focus on integrating security throughout the software development lifecycle (SDLC), ensuring that applications are designed, built, and deployed securely. The AppSec Engineer will work closely with development teams to identify and remediate vulnerabilities, implement secure coding practices, and conduct security assessments of applications. This position offers a fantastic opportunity to shape the security of innovative software products in Nelspruit , with a flexible hybrid working model.

Key Responsibilities

• Collaborate with development teams to embed security best practices into the SDLC.
• Perform security reviews of application designs, code, and architecture.
• Conduct vulnerability assessments and penetration testing of web and mobile applications.
• Develop and implement security testing tools and frameworks (SAST, DAST, IAST).
• Provide guidance and training to developers on secure coding principles and practices.
• Investigate and remediate security vulnerabilities identified in applications.
• Develop and maintain application security policies and standards.
• Monitor security trends and emerging threats relevant to application security.
• Contribute to incident response activities related to application security incidents.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in software development or application security.
• Proven experience in performing security reviews, vulnerability assessments, and penetration testing of applications.
• Strong understanding of common web application vulnerabilities (OWASP Top 10) and mitigation techniques.
• Experience with SAST, DAST, and IAST tools.
• Proficiency in one or more programming languages (e.g., Java, Python, C#, JavaScript).
• Familiarity with cloud security concepts and CI/CD pipelines.
• Excellent communication and interpersonal skills, with the ability to work effectively with development teams.
• Relevant security certifications (e.g., CSSLP, CISSP) are a plus.

Benefits

Our client offers a competitive salary, comprehensive health benefits, a performance-based bonus, and a dedicated budget for professional development and certifications. The role provides a challenging and rewarding environment in Nelspruit, Mpumalanga , with a flexible hybrid work arrangement that balances office collaboration with remote flexibility. Employees benefit from working on innovative projects, a strong team culture, and opportunities for career growth within a dynamic technology company.