Hybrid AppSec Engineer: Secure Software & DevSecOps

Placements24; Sandton; Híbrido; ZAR 540.000 - 720.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical aid

Retirement contributions

Professional development

Descripción de la vacante

Placements24 is seeking an Information Security Specialist focused on Application Security (AppSec) in Sandton, Gauteng. The role blends on-site collaboration with remote flexibility in a hybrid setup.

You will identify and mitigate security vulnerabilities across the software development lifecycle, perform code reviews, and work with developers to embed secure coding practices. A passion for secure software and strong OWASP knowledge are essential.

Formación

• Bachelor's degree required in CS/SE/InfoSec or related field.
• At least 3 years of experience in application security or security-focused development.
• Experience with SAST, DAST and penetration testing.
• Strong knowledge of OWASP Top 10 and related risks.
• Familiarity with secure coding across Java, Python, C#, and JavaScript.

Responsabilidades

• Perform security assessments and penetration testing of web applications, APIs, and mobile apps.
• Conduct security code reviews and provide remediation guidance.
• Integrate security testing into the CI/CD pipeline (DevSecOps).
• Develop and maintain secure coding guidelines and best practices.
• Educate development teams on secure coding principles and remediation.
• Stay updated on emerging app security threats and mitigations.
• Assist in developing and maintaining app security tools and platforms.
• Contribute to the information security strategy with a focus on app security.

Conocimientos

OWASP Top 10

SAST/DAST

Penetration testing

Secure coding principles

DevSecOps awareness

Educación

Bachelor's degree in CS/SE/InfoSec

Herramientas

DevSecOps tools

SAST tools

DAST tools

Descripción del empleo

Placements24 is seeking an Information Security Specialist focused on Application Security (AppSec) in Sandton, Gauteng. The role blends on-site collaboration with remote flexibility in a hybrid setup.

You will identify and mitigate security vulnerabilities across the software development lifecycle, perform code reviews, and work with developers to embed secure coding practices. A passion for secure software and strong OWASP knowledge are essential.