Application Security Specialist

Mukuru; Wes-Kaap; Hybrid; ZAR 600 000 - 800 000; Full time

Job summary

A leading FinTech company in South Africa is seeking an Application Security Specialist to enhance the security of its applications. The role involves penetration testing, securing the cloud infrastructure, and promoting secure coding practices. Ideal candidates will have over 5 years of experience in application security and strong technical skills in tools like Burp Suite and cloud environments. Join a dynamic team dedicated to ensuring customer trust and security.

Qualifications

• 5+ years of experience in IT systems security or application security.
• Strong technical knowledge of web application and network security.
• Solid grasp of secure software development and programming languages (e.g., PHP, .NET).

Responsibilities

• Conduct web and mobile application penetration testing and API security assessments.
• Design and execute Mukuru’s annual penetration testing programme.
• Champion secure coding practices and embed them in the SDLC.

Skills

Offensive security testing

Vulnerability management

AWS or Azure

Secure software development

Web application security

Education

Degree in Computer Science, Information Security or related field

Tools

Burp Suite

Kali

Nmap

Tenable.io

Job description

About Mukuru

Mukuru is one of Africa’s leading FinTech companies, transforming the way millions of people access financial services. With over 40 million cross-border transactions processed, we empower communities through technology that’s safe, affordable, and reliable. Our products — from money transfers and insurance to digital wallets and payment solutions — make financial inclusion possible for individuals and businesses across emerging markets.

The Opportunity

We’re looking for an Application Security Specialist to join our forward-thinking Information Security Team based in Cape Town or Johannesburg, South Africa. This is your chance to play a leading role in securing Mukuru’s rapidly evolving fintech ecosystem and ensuring that our customers’ trust stays rock solid. You’ll work closely with our Engineering, DevOps, and Product teams to safeguard our applications from design to deployment. From penetration testing and vulnerability management to building a culture of secure development, you’ll be the expert who ensures security is baked into everything we build. If you’re passionate about protecting systems, love a technical challenge, and thrive in a fast-paced, collaborative environment — this role was made for you.

What You’ll Do

• Application Security Testing
• Conduct web and mobile application penetration testing and API security assessments.
• Perform threat modelling, secure code reviews, and attack surface analysis.
• Manage and monitor the production cloud infrastructure (AWS/Azure) for vulnerabilities and misconfigurations.
• Lead SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) initiatives.
• Security Assessment Programme
• Design and execute Mukuru’s annual penetration testing programme.
• Coordinate both internal and external security assessments, ensuring proper scoping and timely delivery.
• Manage relationships with external security partners and report on remediation progress.
• Drive collaboration across engineering, IT, and compliance to close security gaps quickly and effectively.
• Secure Development Lifecycle (SDLC) Enablement
• Champion secure coding practices and embed them in the SDLC.
• Partner with developers, testers, and business analysts to provide proactive security guidance during sprints and releases.
• Create and maintain security frameworks, checklists, and guidelines (aligned with OWASP, OSAMM, BSIMM, MITRE).
• Deliver training and awareness sessions to uplift security capability across teams.
• Continuous Improvement & Innovation
• Stay on top of cybersecurity trends, tools, and attack vectors to anticipate risks.
• Research and implement innovative security solutions that strengthen Mukuru’s posture.
• Identify process improvements that make security assessments faster, smarter, and more automated.
• Professional Development
• Participate in KPI meetings and 1:1 sessions with the Head of Information Security.
• Maintain certifications and industry knowledge to remain a trusted subject matter expert.

Essential – What You’ll Bring

• 5+ years of experience in IT systems security or application security.
• Proven experience in offensive security testing and vulnerability management.
• Strong technical knowledge of web application and network security.
• Familiarity with security assessment tools such as Burp Suite, Kali, Nmap, Nikto, Hydra, and Tenable.io.
• Understanding of SAST/DAST tools (e.g., Veracode, Whitesource, Blackduck).
• Experience with AWS or Azure cloud environments.
• Solid grasp of secure software development and programming languages (e.g., PHP, .NET).
• Strong reporting, documentation, and project management skills.

Preferred

• Degree in Computer Science, Information Security, or a related field.
• Industry certifications (e.g., CISSP, CISM, OSCP, ISO 27001, ISSAP).
• Prior experience in a development or DevSecOps environment.

You’ll Thrive Here If You Are

• Passionate about security, automation, and innovation.
• A sharp problem-solver with strong analytical and critical thinking skills.
• A clear communicator who enjoys collaborating across technical and business teams.
• A self-starter who can manage multiple priorities with precision and accountability.
• Curious, always learning, and proactive in identifying new ways to secure systems.

I am sure you are reading this job description and meet majority of the criteria BUT you may also still not be 100% comfortable in applying. We believe that there is a place for everyone under the Mukuru sun and we want YOU to contribute to our diverse tapestry of talent. So come on, take a leap of faith, and send your application if you meet majority of our requirements. Remember to include a snippet of how you will bring value and help us build a future of success that will help us determine where and how you may best be suited. Maybe you are just the future Mukurian we need!!

Should you be appointed in a remote/work from home role at Mukuru, it is your responsibility to ensure that you have uninterrupted internet connectivity and a ‘work-like’ environment at your home location, in order to deliver your best in terms of performance, productivity and service to our customers.

If you do not receive any response after two weeks, please consider your application unsuccessful.

NB: ALL STAFF APPOINTMENTS WILL BE MADE WITH DUE CONSIDERATION OF THE COMPANY’S DIVERSITY AND INCLUSION PLANS