Application Security & Data Protection Specialist

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 420,000 - 660,000; Full time

Job summary

Sasso Consulting (Pty) Ltd is seeking experienced Application and Data Security Specialists to support protection of enterprise applications, sensitive information and critical business systems.

The successful candidates will identify and remediate security risks, implement data protection controls and collaborate with development, security and IT teams to ensure compliance with ISO 27001, NIST and POPIA.

Qualifications

• Typically 3–5 years of relevant experience in application security, data security or a closely related cybersecurity specialisation.
• Hands-on experience identifying and remediating application security vulnerabilities.
• Strong understanding of OWASP Top 10 vulnerabilities and secure coding principles.
• Practical knowledge of application security testing methodologies and tools.
• Experience securing web applications, APIs, databases and enterprise application environments.
• Understanding of encryption, authentication, authorisation and identity and access management principles.
• Familiarity with vulnerability management and security risk assessment processes.
• Knowledge of information security frameworks such as ISO 27001 and NIST.
• Understanding of data protection requirements, including POPIA and applicable privacy regulations.

Responsibilities

• Conduct application security assessments, vulnerability assessments and security reviews across enterprise applications.
• Identify, analyse and remediate application-level security vulnerabilities and data protection risks.
• Implement and maintain application security controls aligned with organisational security policies and industry standards.
• Perform SAST, DAST and SCA.
• Support secure software development lifecycle (SSDLC) processes and DevSecOps practices.
• Assess and strengthen security controls for web applications, APIs, databases and cloud-based applications.
• Conduct security risk assessments and recommend practical remediation strategies.
• Review application authentication, authorisation and session management controls.
• Monitor emerging application security threats, vulnerabilities and attack techniques.
• Assist with security incident investigations involving applications or sensitive data.

Skills

Application Security

Security Testing

Data Security

Cloud Security

DevSecOps

Identity & Access Security

Security Frameworks

Vulnerability Management

Education

Diploma or degree in IT/CS/Cybersecurity

Tools

Burp Suite

OWASP ZAP

Checkmarx

Fortify

Job description

Sasso Consulting (Pty) Ltd is seeking experienced Application and Data Security Specialists to support protection of enterprise applications, sensitive information and critical business systems.

The successful candidates will identify and remediate security risks, implement data protection controls and collaborate with development, security and IT teams to ensure compliance with ISO 27001, NIST and POPIA.