Security Engineer (.NET Software Development)

Sabenza IT & Recruitment; South Africa; Presencial; ZAR 600 000 - 900 000; Tempo integral

Resumo da oferta

Sabenza IT & Recruitment is seeking a Security Engineer to embed secure development practices in the SDLC across .NET/Cloud environments. You will collaborate with software engineers, DevOps, and stakeholders to identify and remediate risks, conduct secure reviews, and implement robust security controls.

You'll apply hands-on application security expertise with secure coding in Microsoft.NET, leveraging Azure services and security tooling while ensuring regulatory and governance compliance.

Qualificações

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• Azure security certifications are advantageous.
• Industry-recognised security certifications such as Security+, SSCP, CEH, AZ-500, CSSLP are advantageous.
• 5+ years in software engineering, application security, or secure solution delivery.
• Hands-on experience securing .NET and cloud-based applications.
• Experience using security testing, code scanning, and vulnerability management tools.
• Experience with Azure-based environments and DevSecOps practices.
• Understanding regulatory, compliance, and governance requirements in enterprise environments.

Responsabilidades

• Embed security best practices throughout the SDLC.
• Conduct security reviews of designs, architectures, and codebases.
• Identify, assess, and remediate application security risks.
• Perform secure code reviews for .NET apps and guide remediation.
• Support authentication, authorization, encryption, and secure communications.
• Configure and maintain security tooling including SAST/ DAST.
• Collaborate with teams to address vulnerabilities from assessments and pen tests.
• Support threat modelling activities and security risk assessments.
• Develop and maintain security standards, guidelines, and secure coding practices.
• Assist with security incident investigation and root cause analysis.
• Ensure compliance with security, privacy, governance and client requirements.
• Share security knowledge and awareness across engineering teams.

Conhecimentos

Secure SDLC

Threat modelling

Secure code review

Vulnerability management

.NET security

C# & .NET

SQL

TypeScript

Python

HTML/CSS

Formação académica

Bachelor's degree in CS / Info Security / Engineering

Azure security certifications advantageous

Security+ / SSCP / CEH / AZ-500 / CSSLP

Ferramentas

Azure DevOps

Git

Docker

SonarQube

OWASP ZAP

Burp Suite

Postman

Microsoft Sentinel

Application Insights

Azure Monitor

Azure Key Vault

Azure App Services

Descrição da oferta de emprego

Job Description

The Security Engineer is responsible for ensuring that software solutions are designed, developed, tested, and deployed in accordance with secure development practices and organisational security standards. Working closely with software engineers, architects, DevOps teams, and client stakeholders, the role focuses on identifying security risks, implementing security controls, and embedding security throughout the software development lifecycle. The Security Engineer combines hands‑on application security expertise with secure coding knowledge within the Microsoft.NET ecosystem.

Responsibilities

• Embed security best practices throughout the software development lifecycle (SDLC).
• Conduct security reviews of application designs, architecture, and codebases.
• Identify, assess, and remediate application security vulnerabilities and risks.
• Perform secure code reviews for .NET applications and provide remediation guidance to development teams.
• Support the implementation of authentication, authorisation, encryption, and secure communication mechanisms.
• Configure and maintain application security tooling, including static and dynamic security testing solutions.
• Collaborate with development teams to address vulnerabilities identified through security assessments and penetration testing.
• Support threat modelling activities and security risk assessments for new and existing solutions.
• Develop and maintain security standards, guidelines, and secure coding practices.
• Assist with security incident investigation, root cause analysis, and remediation activities.
• Ensure solutions comply with security, privacy, governance, and regulatory requirements applicable to client environments.
• Contribute to security awareness and secure development knowledge sharing within engineering teams.

RequirementsTechnical Skills

• Languages & Frameworks: C#, ASP.NET Core, .NET Framework, EF Core, SQL, TypeScript, HTML/CSS, Python Flask, Python
• Application Security: Secure SDLC, threat modelling, secure code reviews, vulnerability management
• DevOps & CI/CD: Azure DevOps, Git, Docker, security scanning tools
• Cloud & Infrastructure: Microsoft Azure, Azure App Services, Azure Key Vault, Azure Storage, Virtual Machines
• Testing & QA: SonarQube, OWASP ZAP, Burp Suite, Postman, security testing frameworks
• Identity & Access Management: OAuth2, OpenID Connect, JWT, Microsoft Entra ID
• Security Standards: OWASP Top 10, CWE, CVSS, secure coding standards
• Monitoring & Logging: Microsoft Sentinel, Application Insights, Azure Monitor (advantageous)

Knowledge & Attributes

• Strong understanding of application security principles and secure software design.
• Ability to identify security risks and communicate mitigation approaches effectively.
• Strong analytical and problem-solving skills.
• Ability to work collaboratively with development, architecture, infrastructure, and operational teams.
• Attention to detail and commitment to delivering secure, high-quality solutions.
• Strong written and verbal communication skills.
• Ability to balance security requirements with business and delivery objectives.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (advantageous), or equivalent practical experience.
• Relevant Microsoft Azure security certifications are advantageous.
• Industry-recognised security certifications such as Security+, SSCP, CEH, AZ-500, CSSLP, or equivalent are advantageous.

Experience

• 5+ years of experience in software engineering, application security, or secure solution delivery.
• Hands-on experience securing.NET and cloud-based applications..NET vs Python Flask ExperienceExperience
• Experience using security testing, code scanning, and vulnerability management tools.
• Experience working with Azure-based environments and DevSecOps practices.
• Understanding of regulatory, compliance, and governance requirements within enterprise environments.
• Experience supporting remediation activities arising from security assessments and penetration testing exercises.