Remote Senior Application Security Specialist

Placements24; Welkom; Hybrid; ZAR 900,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary (ZAR)

Fully remote work arrangement

Health, dental, and vision insurance

Generous paid time off

Job summary

Placements24 is seeking a Senior Application Security Specialist to join a fully remote team. You will embed security in the SDLC, conduct security testing, and mentor development teams, with focus on Welkom, Free State and international clients.

The role emphasizes secure coding, SSDLC, and collaboration with global teams, offering extensive security tooling and professional growth opportunities in a remote setup.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field; equivalent practical experience considered.
• Minimum 6 years of experience in application security or related field.
• Strong knowledge of OWASP Top 10 and secure coding principles.
• Experience with SSDLC and integrating security into CI/CD pipelines.
• Familiarity with cloud security principles across AWS/Azure/GCP.

Responsibilities

• Collaborate with development teams to embed security controls and best practices throughout the SDLC, from design to deployment.
• Perform comprehensive security assessments of web applications, APIs, and mobile applications using various tools and methodologies.
• Conduct security code reviews to identify vulnerabilities such as injection flaws, broken authentication, and XSS.
• Develop and maintain security testing tools and frameworks to automate security checks within CI/CD pipelines.
• Provide guidance and training to developers on secure coding practices and application security principles.
• Investigate and remediate security vulnerabilities discovered in production applications.
• Contribute to the development and maintenance of security architecture guidelines and threat models.
• Stay current with emerging application security threats, vulnerabilities, and mitigation techniques.

Skills

OWASP Top 10 awareness

Secure coding practices

CI/CD security integration

Security testing proficiency

Remote collaboration

Education

Bachelor's degree in Computer Science / Information Security

Tools

SAST

DAST

IAST

Penetration testing methodologies

Job description

About the Role

Our client is a globally recognized software development company looking for a dedicated Senior Application Security Specialist to join their fully remote team. This role is designed for individuals who are passionate about building secure software from the ground up. You will play a critical part in integrating security best practices into the software development lifecycle (SDLC), conducting code reviews, performing security testing, and mentoring development teams. This is a fully remote position, allowing you to contribute your expertise from the comfort of your home office, regardless of your location. We are specifically looking for top-tier talent to enhance our security posture in Welkom, Free State and beyond.

Key Responsibilities

• Collaborate with development teams to embed security controls and best practices throughout the SDLC, from design to deployment.
• Perform comprehensive security assessments of web applications, APIs, and mobile applications using various tools and methodologies.
• Conduct security code reviews to identify vulnerabilities such as injection flaws, broken authentication, and cross-site scripting (XSS).
• Develop and maintain security testing tools and frameworks to automate security checks within CI/CD pipelines.
• Provide guidance and training to developers on secure coding practices and application security principles.
• Investigate and remediate security vulnerabilities discovered in production applications.
• Contribute to the development and maintenance of security architecture guidelines and threat models.
• Stay current with emerging application security threats, vulnerabilities, and mitigation techniques.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.
• Minimum of 6 years of experience in application security, software development, or a related security field.
• Strong understanding of common web application vulnerabilities (OWASP Top 10) and secure coding principles.
• Proficiency in using application security testing tools (SAST, DAST, IAST) and penetration testing methodologies.
• Experience with secure software development lifecycles (SSDLC) and integrating security into CI/CD pipelines.
• Familiarity with cloud security principles (AWS, Azure, GCP) as they relate to application deployments.
• Excellent problem-solving and analytical skills, with a keen eye for detail.
• Strong communication and collaboration skills, with the ability to work effectively in a remote team environment.
• Relevant certifications like CSSLP, OSCP, or GWAPT are highly desirable.

Benefits

• Competitive salary and potential for performance bonuses.
• Fully remote work arrangement, offering maximum flexibility.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and holidays.
• Access to cutting-edge security tools and professional development resources.
• Opportunity to work on innovative projects with a global impact, supporting Welkom, Free State and international clients.
• Retirement savings plan with company matching.