Information Security Specialist - Application Security

Placements24; Soweto; Hybrid; ZAR 550,000 - 850,000; Full time

Benefits offered by this job

Hybrid work model

Professional growth opportunities

Training in application security

Collaborative security culture

Job summary

Placements24 is seeking an Information Security Specialist with a strong application security focus in Soweto, Gauteng. You will drive secure software development through code reviews, vulnerability assessments, and collaboration with developers to remediate issues.

You will perform DAST/SAST, educate teams on secure coding, and ensure security is integrated into the CI/CD pipeline while staying current with industry best practices.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity or related field.
• Minimum of 3 years in information security with a focus on application security.
• Experience with application security testing methods (SAST, DAST, IAST).
• Familiar with common programming languages (Java, Python, C#, JavaScript) and security implications.
• Strong understanding of web app security principles and OWASP Top 10.
• Experience with security tools such as Burp Suite, OWASP ZAP, SonarQube or Veracode.
• Knowledge of secure coding standards and best practices.
• Excellent communication and collaboration with development teams.
• Certifications such as CSSLP, GIAC AppSec, or CEH (AppSec focus) a plus.

Responsibilities

• Conduct security reviews of application source code to identify vulnerabilities and design flaws.
• Perform dynamic and static application security testing (DAST/SAST/IAST) using various tools.
• Identify and assess web application vulnerabilities including OWASP Top 10.
• Educate developers on secure coding practices and remediation techniques.
• Integrate security testing into the CI/CD pipeline.
• Develop and maintain application security policies and guidelines.
• Assist in security architecture design for new apps and features.
• Investigate and respond to application security incidents as needed.
• Stay updated with emerging threats and best practices.
• Advise on security requirements for new projects.

Skills

Application security

Secure coding

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Burp Suite

OWASP ZAP

SonarQube

Veracode

Job description

About the Role

Our client is looking for a dedicated Information Security Specialist with a strong focus on Application Security to join their team in Soweto, Gauteng . In this role, you will be instrumental in ensuring the security of software applications throughout their development lifecycle. This includes conducting security code reviews, performing application vulnerability assessments, and working closely with development teams to implement secure coding practices and remediate vulnerabilities. The ideal candidate is passionate about secure software development, possesses excellent analytical skills, and has a deep understanding of common application security risks. This is a fantastic opportunity to contribute to building secure and reliable applications.

Key Responsibilities

• Conduct security reviews of application source code to identify vulnerabilities and design flaws.
• Perform dynamic and static application security testing (DAST/SAST) using various tools.
• Identify and assess common web application vulnerabilities, such as those in the OWASP Top 10.
• Collaborate with software developers and engineers to educate them on secure coding practices and remediation techniques.
• Work with development teams to integrate security testing into the CI/CD pipeline.
• Develop and maintain application security policies, standards, and guidelines.
• Assist in the security architecture design for new applications and features.
• Investigate and respond to application security incidents as needed.
• Stay current with emerging application security threats, tools, and best practices.
• Advise on security requirements for new application development projects.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security, with a specialization in application security.
• Proven experience with application security testing methodologies (SAST, DAST, IAST).
• Familiarity with common programming languages (e.g., Java, Python, C#, JavaScript) and their security implications.
• Strong understanding of web application security principles and vulnerabilities.
• Experience with security tools such as Burp Suite, OWASP ZAP, SonarQube, or Veracode.
• Knowledge of secure coding standards and best practices.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with development teams.
• Strong analytical and problem-solving abilities.
• Relevant certifications such as CSSLP, GIAC Application Security Certified Professional (GASC-P), or CEH (AppSec focus) are a plus.

Benefits

• Competitive salary and benefits package.
• Opportunities for professional growth and training in application security.
• Exposure to a variety of development projects and technologies.
• A collaborative work environment focused on innovation and security.
• Contribute to the security of software applications used by many users.
• Hybrid work model offering a good work-life balance.