Remote App Security Engineer — Build Secure Software

Placements24; Bloemfontein; Hybrid; ZAR 600,000 - 1,100,000; Full time

Benefits offered by this job

Comprehensive health and wellness

Flexible working hours

Generous paid time off

Online training and certifications

Fully remote work setup

Exposure to innovative projects

401k matching

Regular virtual team events

Job summary

Placements24 is recruiting a Remote Application Security Specialist to safeguard software throughout the development lifecycle. You will perform SAST/DAST testing, review designs and code, and collaborate with developers to remediate vulnerabilities while promoting secure coding practices.

The role emphasizes threat modeling, OWASP Top 10 awareness, and CI/CD security integration in a fully remote setup. Strong communication is essential for remote collaboration.

Qualifications

• Bachelor's degree in CS, Software Engineering, or related field
• 3–5 years in application security or related role
• Strong knowledge of common web vulnerabilities (SQLi, XSS, CSRF)
• Experience with SAST/DAST tools such as SonarQube, Burp Suite, OWASP ZAP
• Familiarity with secure SDLC and DevSecOps
• Proficiency in at least one language (Java, Python, C#, JS)
• Understanding of cryptography and secure data handling

Responsibilities

• Conduct security reviews of designs and code
• Perform SAST/DAST testing
• Identify and prioritize vulnerabilities
• Remediate security flaws with dev teams
• Develop and maintain security guidelines
• Integrate security tools into CI/CD
• Respond to security incidents
• Stay updated on OWASP Top 10
• Provide secure coding guidance to developers
• Contribute to threat modeling for features

Skills

Secure coding

SAST/DAST

OWASP Top 10

Programming languages

Threat modeling

Security incident response

CI/CD security

Education

Bachelor's degree

Tools

SonarQube

Burp Suite

OWASP ZAP

Job description

Placements24 is recruiting a Remote Application Security Specialist to safeguard software throughout the development lifecycle. You will perform SAST/DAST testing, review designs and code, and collaborate with developers to remediate vulnerabilities while promoting secure coding practices.

The role emphasizes threat modeling, OWASP Top 10 awareness, and CI/CD security integration in a fully remote setup. Strong communication is essential for remote collaboration.