Hybrid: Application Security & Data Protection Engineer

Sasso Consulting; Johannesburg; Hybrid; ZAR 700,000 - 900,000; Full time

Job summary

Sasso Consulting is seeking experienced Application and Data Security Specialists in Gauteng to protect enterprise applications and sensitive information. The role focuses on identifying risks, implementing data protection controls and ensuring compliance with cybersecurity standards.

Responsibilities include conducting security assessments (SAST/DAST/SCA), remediation of vulnerabilities, and collaborating with developers and IT teams to embed secure software development practices across

Qualifications

• 3–5 years of experience in application security or data security.
• Solid understanding of OWASP Top 10 vulnerabilities and secure coding.
• Experience with SAST/DAST/SCA and vulnerability remediation.
• Knowledge of encryption, authentication, authorization and IAM.
• Familiarity with ISO 27001, NIST and POPIA/privacy requirements.

Responsibilities

• Conduct application security assessments and vulnerability reviews.
• Identify and remediate application security vulnerabilities and data risks.
• Implement and maintain security controls across apps, APIs, and databases.
• Perform SAST, DAST and SCA, and support SSDLC/DevSecOps.
• Collaborate with development and security teams to address weaknesses.
• Review authentication, authorization and session management controls.
• Maintain security documentation and remediation recommendations.

Skills

Application Security

Vulnerability Management

SSDLC

DevSecOps

SAST

DAST

SCA

Cloud Security

OWASP Top 10

Encryption

Education

Degree in IT / Cybersecurity

Tools

Burp Suite

OWASP ZAP

Checkmarx

Fortify

Job description

Sasso Consulting is seeking experienced Application and Data Security Specialists in Gauteng to protect enterprise applications and sensitive information. The role focuses on identifying risks, implementing data protection controls and ensuring compliance with cybersecurity standards.

Responsibilities include conducting security assessments (SAST/DAST/SCA), remediation of vulnerabilities, and collaborating with developers and IT teams to embed secure software development practices across