Application Security Lead

R2R Consults; Johannesburg; On-site; ZAR 800,000 - 1,000,000; Full time

Job summary

A security consultancy is seeking a Lead Application Security professional in Johannesburg. The role demands technical leadership in securing software applications and involves implementing security policies and conducting assessments. The ideal candidate must have over 6 years of IT Security experience and strong communication skills. This position offers excellent career development opportunities.

Benefits

Leadership Role

Excellent career development opportunities

Qualifications

• At least 6 years of experience in IT Security.
• Good interpersonal and communication skills.
• Working knowledge of SAST, DAST, and security testing.
• Strong analytical skills with numerical data.
• Ability to manage multiple stakeholders.

Responsibilities

• Lead the implementation of application security initiatives.
• Design and implement security controls in SDLC.
• Conduct threat modeling and risk assessments.
• Perform code reviews and penetration testing.
• Lead the remediation of security vulnerabilities.
• Deliver application security training to juniors.
• Monitor emerging threats and vulnerabilities.

Skills

Application security

Threat modeling

Risk assessments

Penetration testing

Vulnerability assessment

DevSecOps

Security frameworks (OWASP, NIST, ISO 27001)

Education

CISSP

CSSLP

GWAPT

OSCP

CKS

Cloud Security certifications (AWS, Azure, GCP)

Job description

Overview

The Lead Application Security position is responsible for providing technical leadership in securing software applications across the organization. This role involves implementing security policies, conducting security assessments, and working closely with development teams to ensure applications are designed and maintained with robust security measures. The Lead Application Security works with development teams to integrate security best practices throughout the software development lifecycle, helping to mitigate risks and protect organizational data and systems.

Certification must have :

CISSP, CSSLP, GWAPT, OSCP, CKS, Cloud Security certifications (AWS Security, Azure Security, or GCP Security) preferred

The Role

Key Accountabilities

• Lead the technical implementation of application security initiatives, ensuring alignment with organizational security strategy
• Design and implement security controls throughout the software development lifecycle (SDLC)
• Conduct detailed threat modeling and risk assessments for critical applications
• Perform advanced code reviews, penetration testing, and vulnerability assessments
• Lead the remediation of security vulnerabilities and track resolution progress
• Deliver application security training and mentor junior team members
• Monitor emerging threats and vulnerabilities, recommending appropriate security measures
• Collaborate with development and operations teams to embed security in the SDLC
• Provide technical guidance and mentorship to application security team members
• Implement and maintain container security policies and best practices
• Assess and enhance security measures for containerized applications
• Review and secure cloud-native application architectures
• Security Testing: Advanced experience with SAST, DAST, and IAST methodologies
• DevSecOps: Experience integrating security into CI / CD pipelines
• Security Frameworks: In-depth knowledge of OWASP, NIST, and ISO 27001

Ideal Profile

• You have at least 6 years experience, ideally within a IT Security role.
• You have good interpersonal and communication skills and are adept at working with multiple stakeholders to drive desired outcomes.
• You have working knowledge of security testing, SAST, OWASP, ISO 27001 and CI / CD
• You are a strong networker & relationship builder
• You possess strong analytical skills and are comfortable dealing with numerical data
• You are a strong team player who can manage multiple stakeholders

What’s on Offer?

• Leadership Role
• Excellent career development opportunities