Application Security Specialist

Mukuru; Johannesburg; On-site; ZAR 600 000 - 900 000; Full time

Job summary

A leading fintech firm in Gauteng, Johannesburg seeks an Application Security Specialist to safeguard applications and infrastructure amidst evolving cyber threats. This role will involve penetration testing, vulnerability management, and collaboration across teams, ensuring robust security practices are embedded in the development lifecycle. Ideal candidates have 5+ years in IT security and a passion for proactive problem-solving.

Qualifications

• 5+ years of experience in IT systems security or application security.
• Proven experience in offensive security testing and vulnerability management.
• Strong technical knowledge of web application and network security.

Responsibilities

• Conduct web and mobile application penetration testing and API security assessments.
• Design and execute Mukuru’s annual penetration testing programme.
• Champion secure coding practices and embed them in the SDLC.

Skills

Offensive security testing

Vulnerability management

Web application security

Network security

Technical documentation

Project management

Education

Degree in Computer Science or Information Security

Tools

Burp Suite

Kali

Nmap

AWS

Azure

Veracode

Job description

Job title : Application Security Specialist

Job Location : Gauteng, Johannesburg

Deadline : November 30, 2025

Quick Recommended Links

• Jobs by Location
• Job by industries

The Opportunity

• We’re looking for an Application Security Specialist to join our forward-thinking Information Security Team. This is your chance to play a leading role in securing Mukuru’s rapidly evolving fintech ecosystem and ensuring that our customers’ trust stays rock solid.
• You’ll work closely with our Engineering, DevOps, and Product teams to safeguard our applications from design to deployment. From penetration testing and vulnerability management to building a culture of secure development, you’ll be the expert who ensures security is baked into everything we build.
• If you’re passionate about protecting systems, love a technical challenge, and thrive in a fast-paced, collaborative environment — this role was made for you.

What You’ll Do

Application Security Testing

• Conduct web and mobile application penetration testing and API security assessments.
• Perform threat modelling, secure code reviews, and attack surface analysis.
• Manage and monitor the production cloud infrastructure (AWS / Azure) for vulnerabilities and misconfigurations.
• Lead SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) initiatives.

Security Assessment Programme

• Design and execute Mukuru’s annual penetration testing programme.
• Coordinate both internal and external security assessments, ensuring proper scoping and timely delivery.
• Manage relationships with external security partners and report on remediation progress.
• Drive collaboration across engineering, IT, and compliance to close security gaps quickly and effectively.

Secure Development Lifecycle (SDLC) Enablement

• Champion secure coding practices and embed them in the SDLC.
• Partner with developers, testers, and business analysts to provide proactive security guidance during sprints and releases.
• Create and maintain security frameworks, checklists, and guidelines (aligned with OWASP, OSAMM, BSIMM, MITRE).
• Deliver training and awareness sessions to uplift security capability across teams.

Continuous Improvement & Innovation

• Stay on top of cybersecurity trends, tools, and attack vectors to anticipate risks.
• Research and implement innovative security solutions that strengthen Mukuru’s posture.
• Identify process improvements that make security assessments faster, smarter, and more automated.

Professional Development

• Participate in KPI meetings and 1 : 1 sessions with the Head of Information Security.
• Maintain certifications and industry knowledge to remain a trusted subject matter expert.

What You’ll Bring

Essential :

• 5+ years of experience in IT systems security or application security.
• Proven experience in offensive security testing and vulnerability management.
• Strong technical knowledge of web application and network security.
• Familiarity with security assessment tools such as Burp Suite, Kali, Nmap, Nikto, Hydra, and Tenable.io.
• Understanding of SAST / DAST tools (e.g., Veracode, Whitesource, Blackduck).
• Experience with AWS or Azure cloud environments.
• Solid grasp of secure software development and programming languages (e.g., PHP, .NET).
• Strong reporting, documentation, and project management skills.

Preferred :

• Degree in Computer Science, Information Security, or a related field.
• Industry certifications (e.g., CISSP, CISM, OSCP, ISO 27001, ISSAP).
• Prior experience in a development or DevSecOps environment.

You’ll Thrive Here If You Are :

• Passionate about security, automation, and innovation.
• A sharp problem-solver with strong analytical and critical thinking skills.
• A clear communicator who enjoys collaborating across technical and business teams.
• A self-starter who can manage multiple priorities with precision and accountability.
• Curious, always learning, and proactive in identifying new ways to secure systems.