Principal Application Security Engineer (Remote-First)

Placements24; Stellenbosch; Hybrid; ZAR 2,334,000 - 3,501,000; Full time

Benefits offered by this job

Health benefits

Home office allowance

Training & conferences

Performance bonuses

Generous time off

Job summary

Placements24 is seeking a highly experienced Principal Application Security Engineer to join their fully remote team. This senior role drives security across the SDLC, defines secure coding standards, and mentors development teams to build resilient software in a remote-first environment.

You will lead security programs, steward threat modeling, and oversee SAST/DAST/IAST/SCA tooling, while collaborating with engineers and product managers worldwide.

Qualifications

• 10+ years in application security engineering or secure software development.
• Proven track record designing and implementing security programs.
• Deep knowledge of OWASP Top 10 in web and mobile apps.
• Experience with SAST/DAST/IAST/SCA and cloud security (AWS/Azure/GCP).
• Excellent remote collaboration and leadership.

Responsibilities

• Lead application security programs and strategies.
• Develop secure coding guidelines and standards.
• Perform security reviews of architectures and code.
• Manage security testing tools (SAST/DAST/IAST/SCA).
• Conduct threat modeling for new/existing apps.
• Mentor junior security engineers and share knowledge.
• Advise on security in CI/CD pipelines.

Skills

AppSec engineering

Threat modeling

Security tooling

Cloud security

Secure coding

Leadership

Remote collaboration

Education

Master's degree in CS/InfoSec

Tools

SAST tools

DAST tools

IAST tools

SCA tools

Job description

About the Role

Our client is seeking a highly experienced and visionary Principal Application Security Engineer to join their fully remote team. This senior role is pivotal in embedding security best practices throughout the software development lifecycle (SDLC) for all applications. You will be responsible for leading application security initiatives, developing secure coding standards, and championing security awareness among development teams. As a remote-first expert, you will collaborate virtually with engineers and product managers across different locations, ensuring that security is a foundational element of our client's software products. The ideal candidate possesses deep expertise in secure coding practices, vulnerability assessment, and security tooling within a DevOps environment. This is an exceptional opportunity to shape the security of software at a strategic level while enjoying the flexibility of a remote work arrangement.

Key Responsibilities

• Lead the design and implementation of application security programs and strategies.
• Develop and enforce secure coding guidelines, standards, and best practices.
• Perform security reviews of application architectures and code.
• Implement and manage application security testing tools (SAST, DAST, IAST, SCA).
• Conduct threat modeling exercises for new and existing applications.
• Provide security guidance and training to development teams.
• Respond to and assist in remediating application security vulnerabilities.
• Contribute to security automation within CI/CD pipelines.
• Stay abreast of emerging application security threats and vulnerabilities.
• Mentor junior security engineers and contribute to security knowledge sharing.

Requirements

• Master's degree in Computer Science, Information Security, or a related field.
• 10+ years of experience in application security engineering or software development with a security focus.
• Proven track record of designing and implementing comprehensive application security programs.
• In-depth knowledge of common web and mobile application vulnerabilities (e.g., OWASP Top 10).
• Expertise in secure coding practices for various programming languages (e.g., Java, Python, C#, JavaScript).
• Strong experience with SAST, DAST, IAST, and SCA tools.
• Experience with cloud-native application security (e.g., AWS, Azure, GCP).
• Excellent communication, collaboration, and leadership skills, particularly in a remote setting.
• Deep understanding of security principles and their application in the SDLC.
• Relevant certifications such as CSSLP, CISSP, or security-focused cloud certifications are highly valued.

Benefits

Our client offers a competitive salary, excellent health benefits, and a generous home office allowance. This remote-first role provides unparalleled flexibility and autonomy. You will be part of an innovative and supportive team, working with cutting-edge technologies. Opportunities for professional growth, including advanced training and conference attendance, are provided. Our client fosters a culture of continuous learning and collaboration. Benefits include performance bonuses, significant paid time off, and a 401k matching program. We are dedicated to supporting your career and well-being.