Senior Application Security Engineer

Placements24; Bloemfontein; Remote; ZAR 1,990,000 - 2,986,000; Full time

Benefits offered by this job

Health coverage

Paid time off

Remote work stipend

Learning opportunities

Conferences

Job summary

Placements24 is seeking a Senior Application Security Engineer for a remote-first, globally distributed team. You will drive security across the full software lifecycle, collaborate with developers to embed secure practices, and lead remediation of vulnerabilities in production and code.

The role emphasizes SDLC security, threat modeling, SAST/DAST, and CI/CD integration. You will mentor teams, stay current with OWASP Top 10, and help establish secure coding standards in cloud environments.

Qualifications

• Bachelor’s degree in CS/Engineering/Cybersecurity or related field.
• 6+ years in application security, software development, or security engineering.
• Strong knowledge of OWASP Top 10 and remediation strategies.
• Proficient with SAST/DAST tools and vulnerability management platforms.
• Experience with secure SDLC/DevSecOps and cloud security fundamentals.
• Scripting in Python or Go is a plus; relevant security certs are beneficial.

Responsibilities

• Collaborate with developers to integrate security into the SDLC.
• Perform threat modeling and security design reviews.
• Lead SAST/DAST testing and remediation guidance.
• Develop secure coding guidelines and training materials.
• Manage vulnerabilities and automate security checks in CI/CD.
• Respond to security incidents and keep pace with threats.

Skills

Application security

Security testing

DevSecOps

SAST

DAST

Python/Go scripting

Cloud security

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity

Tools

SAST tools

DAST tools

Vulnerability management platforms

Job description

About the Role

Our client, a leading innovator in the software development space, is looking for a Senior Application Security Engineer to join their globally distributed, remote-first team. This role is central to ensuring the security of our client's software applications throughout their entire lifecycle, from design and development to deployment and maintenance. You will work closely with development teams to embed security best practices, identify and remediate vulnerabilities, and build secure coding standards. This is an outstanding opportunity to contribute to a culture of security excellence in a fully remote capacity, driving innovation from anywhere.

Key Responsibilities

• Collaborate with software developers and architects to integrate security best practices into the application development lifecycle (SDLC).
• Conduct threat modeling and security design reviews for new and existing applications.
• Perform static (SAST) and dynamic (DAST) application security testing, and guide remediation efforts.
• Develop and maintain secure coding guidelines, standards, and training materials for development teams.
• Identify, prioritize, and track application security vulnerabilities using various tools and methodologies.
• Automate security testing and integrate security checks into CI/CD pipelines.
• Respond to and manage security incidents related to applications.
• Stay up-to-date with the latest application security threats, vulnerabilities, and defense techniques.

Requirements

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related technical field.
• A minimum of 6 years of experience in application security, software development, or a related security engineering role.
• Strong understanding of common web application vulnerabilities (e.g., OWASP Top 10) and their remediation.
• Proficiency with SAST and DAST tools, security code review techniques, and vulnerability management platforms.
• Experience with secure SDLC methodologies and DevSecOps practices.
• Familiarity with security in cloud environments (AWS, Azure, GCP) is highly desirable.
• Excellent communication and collaboration skills, with the ability to influence development teams.
• Experience with scripting languages like Python or Go for automation is a plus.
• Relevant security certifications such as CSSLP, GWAPT, or GIAC is beneficial.

Benefits

• Highly competitive salary and potential for performance bonuses.
• Comprehensive health, dental, and vision insurance coverage.
• Generous paid time off and remote work stipend.
• Opportunities for continuous learning, advanced certifications, and attending industry conferences.
• Work in a truly remote-first, flexible, and collaborative environment.
• Direct impact on securing critical software applications for a global user base.

Join a company committed to fostering a strong security culture from the ground up in Bloemfontein .