Information Security Specialist - Application Security (AppSec)

Placements24; Sandton; Hybrid; ZAR 540,000 - 720,000; Full time

Benefits offered by this job

Medical aid

Retirement contributions

Professional development

Job summary

Placements24 is seeking an Information Security Specialist focused on Application Security (AppSec) in Sandton, Gauteng. The role blends on-site collaboration with remote flexibility in a hybrid setup.

You will identify and mitigate security vulnerabilities across the software development lifecycle, perform code reviews, and work with developers to embed secure coding practices. A passion for secure software and strong OWASP knowledge are essential.

Qualifications

• Bachelor's degree required in CS/SE/InfoSec or related field.
• At least 3 years of experience in application security or security-focused development.
• Experience with SAST, DAST and penetration testing.
• Strong knowledge of OWASP Top 10 and related risks.
• Familiarity with secure coding across Java, Python, C#, and JavaScript.

Responsibilities

• Perform security assessments and penetration testing of web applications, APIs, and mobile apps.
• Conduct security code reviews and provide remediation guidance.
• Integrate security testing into the CI/CD pipeline (DevSecOps).
• Develop and maintain secure coding guidelines and best practices.
• Educate development teams on secure coding principles and remediation.
• Stay updated on emerging app security threats and mitigations.
• Assist in developing and maintaining app security tools and platforms.
• Contribute to the information security strategy with a focus on app security.

Skills

OWASP Top 10

SAST/DAST

Penetration testing

Secure coding principles

DevSecOps awareness

Education

Bachelor's degree in CS/SE/InfoSec

Tools

DevSecOps tools

SAST tools

DAST tools

Job description

About the Role

Our client is seeking a dedicated Information Security Specialist with a focus on Application Security (AppSec) to join their growing team. This role is based in Sandton, Gauteng , and offers a hybrid work arrangement, blending essential on-site collaboration with remote flexibility. You will be responsible for identifying and mitigating security vulnerabilities in software applications throughout the development lifecycle. This includes performing security code reviews, penetration testing, and working closely with development teams to embed secure coding practices. The ideal candidate has a passion for secure software development and a strong understanding of common web application vulnerabilities and their remediation. This is a vital role in ensuring the security and integrity of our client's software products.

Key Responsibilities

• Perform security assessments and penetration testing of web applications, APIs, and mobile applications.
• Conduct security code reviews to identify vulnerabilities and provide remediation guidance.
• Integrate security testing into the CI/CD pipeline (DevSecOps).
• Develop and maintain secure coding guidelines and best practices.
• Work closely with software development teams to educate them on secure coding principles and address identified vulnerabilities.
• Stay up-to-date with emerging application security threats, vulnerabilities and mitigation techniques.
• Assist in the development and maintenance of application security tools and platforms.
• Contribute to the overall information security strategy, with a focus on application security.
• Respond to application security incidents and assist in remediation efforts.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related field.
• Minimum of 3 years of experience in application security or software development with a security focus.
• Proven experience in conducting application security assessments, including SAST, DAST, and penetration testing.
• Strong understanding of OWASP Top 10 vulnerabilities and other common application security risks.
• Familiarity with secure coding principles and practices across various programming languages (e.g., Java, Python, C#, JavaScript).
• Experience with DevSecOps principles and tools is highly desirable.
• Knowledge of security frameworks and compliance requirements relevant to application security.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills, with the ability to work effectively with development teams.
• Ability to work effectively within a hybrid model, residing within commuting distance of Sandton, Gauteng .

Benefits

Our client offers a competitive salary and benefits package, including medical aid and retirement contributions. The hybrid work model provides flexibility and a healthy work-life balance. Opportunities for professional development, including advanced training and certifications in application security, are available. You will work with a talented team in a collaborative environment. The role is based in the bustling hub of Sandton, Gauteng , providing excellent accessibility. This position offers a chance to specialize and grow within the critical field of application security.