Application Security & Data Protection Analyst

Sasso Consulting (Pty) Ltd; Johannesburg; In loco; ZAR 600.000 - 1.200.000; Tempo pieno

Descrizione del lavoro

Sasso Consulting (Pty) Ltd is seeking an experienced Application and Data Security Specialist to protect enterprise applications, sensitive data and critical systems in Centurion, Gauteng. The role focuses on identifying risks, implementing controls and ensuring compliance with cybersecurity standards.

The successful candidate will conduct vulnerability assessments, lead remediation efforts, and collaborate with development, infrastructure and security teams to strengthen security across web

Competenze

• Degree in IT, CS, cybersecurity or related discipline.
• 3–5 years of experience in application/data security.
• Hands-on in remediating vulnerabilities and security testing.
• Familiar with ISO/NIST and POPIA privacy controls.

Mansioni

• Conduct security assessments across enterprise apps.
• Identify and remediate application vulnerabilities and data risks.
• Implement and monitor security controls per policies and standards.
• Perform SAST, DAST, and software composition analysis (SCA).
• Support SSDLC and DevSecOps practices.
• Assess security for web apps, APIs, databases, and cloud apps.
• Configure encryption, masking and access controls.
• Collaborate with dev, infra and security teams for remediation.
• Produce risk assessments and remediation recommendations.
• Assist with data classification and data loss prevention.

Conoscenze

OWASP Top 10

Vulnerability assessment

SAST/DAST

DevSecOps

Cloud security

Encryption

Formazione

Bachelor's degree in IT or cybersecurity

Strumenti

Burp Suite

OWASP ZAP

Checkmarx

Fortify

Descrizione del lavoro

Sasso Consulting (Pty) Ltd is seeking an experienced Application and Data Security Specialist to protect enterprise applications, sensitive data and critical systems in Centurion, Gauteng. The role focuses on identifying risks, implementing controls and ensuring compliance with cybersecurity standards.

The successful candidate will conduct vulnerability assessments, lead remediation efforts, and collaborate with development, infrastructure and security teams to strengthen security across web