Security Engineer - Application Security

Placements24; Stellenbosch; Hybrid; ZAR 600,000 - 1,000,000; Full time

Benefits offered by this job

Competitive salary

Performance bonuses

Health benefits

Hybrid work

Retirement plan

Professional growth opportunities

Job summary

Placements24 is seeking a skilled Security Engineer specializing in Application Security to join our technology team in Paarl, Western Cape. You will secure software across the development lifecycle, collaborate with developers, and integrate security into the CI/CD pipeline.

The role requires 3-5 years in security engineering, deep OWASP knowledge, and hands-on experience with SAST/DAST, CI/CD, and cloud security. A strong communicator and team player will thrive in our security-first culture.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 3-5 years in application security or security engineering.
• Strong knowledge of OWASP Top 10 and mitigations.
• Experience with SAST and DAST tools.
• Proficient in Java, Python, C#, or JavaScript.
• Familiarity with CI/CD (Jenkins, GitLab CI) and Docker.
• Experience with API security and cloud security is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Relevant security certifications (CSSLP, GWEB) beneficial.

Responsibilities

• Perform security reviews of designs and code.
• Conduct vulnerability assessments and penetration testing on web applications, APIs, and mobile apps.
• Integrate security testing tools into the CI/CD pipeline (SAST, DAST, SCA).
• Develop and maintain secure coding guidelines and best practices.
• Provide guidance and training to development teams on secure coding techniques.
• Investigate and respond to security incidents related to applications.
• Assist in development and maintenance of security policies and procedures for application development.
• Stay current with emerging application security threats and vulnerabilities.
• Collaborate with product managers, developers, and QA engineers to ensure secure software delivery.
• Automate security tasks and processes where possible.

Skills

OWASP Top 10

SAST/DAST

CI/CD security

Secure coding

Java

Python

C#

JavaScript

Jenkins

GitLab CI

Docker

API security

Cloud security

Problem solving

Communication

Security certifications

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Jenkins

GitLab CI

Docker

SAST tools

DAST tools

SCA tools

Job description

About the Role

Our client is seeking a skilled Security Engineer with a specialization in Application Security to join their growing technology team in Paarl, Western Cape, ZA. In this role, you will be responsible for ensuring the security of our client's software applications throughout their development lifecycle. You will work closely with development teams to identify and remediate vulnerabilities, implement secure coding practices, and integrate security into the CI/CD pipeline. This position requires a strong understanding of application security principles, common vulnerabilities, and secure development methodologies. The ideal candidate is passionate about building secure software and driving a security-first mindset within the engineering organization.

Key Responsibilities

• Perform security reviews of application designs and code.
• Conduct vulnerability assessments and penetration testing on web applications, APIs, and mobile applications.
• Integrate security testing tools into the CI/CD pipeline (SAST, DAST, SCA).
• Develop and maintain secure coding guidelines and best practices.
• Provide guidance and training to development teams on secure coding techniques.
• Investigate and respond to security incidents related to applications.
• Assist in the development and maintenance of security policies and procedures for application development.
• Stay current with emerging application security threats and vulnerabilities.
• Collaborate with product managers, developers, and QA engineers to ensure secure software delivery.
• Automate security tasks and processes where possible.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3-5 years of experience in application security, software development, or a related security engineering role.
• Strong understanding of OWASP Top 10 vulnerabilities and mitigation strategies.
• Experience with static (SAST) and dynamic (DAST) application security testing tools.
• Knowledge of secure coding principles and common programming languages (e.g., Java, Python, C#, JavaScript).
• Familiarity with CI/CD tools and practices (e.g., Jenkins, GitLab CI, Docker).
• Experience with API security and cloud security concepts is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Relevant security certifications (e.g., CSSLP, GWEB) are beneficial.

Benefits

• Competitive salary and performance bonuses.
• Comprehensive health and wellness benefits.
• Opportunities for professional growth and certifications in application security.
• A collaborative and innovative work culture in Paarl, Western Cape, ZA .
• Retirement fund contributions.
• Exposure to cutting-edge application development projects.
• Hybrid work arrangements for improved work-life balance.