Senior Application Security Engineer

Placements24; Durban; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Performance bonuses

Job summary

Placements24 seeks a Senior Application Security Engineer for a Durban on-site role with a prominent e-commerce client. You will secure the application lifecycle from design to deployment, collaborating with development teams to embed secure coding practices and remediate vulnerabilities.

Require 7+ years in app security, hands-on with SAST/DAST/IAST, cloud and container security, and CI/CD integration. Strong communicative ability and Durban-based presence are essential.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or related field.
• Minimum of 7 years in application security, secure software development, or related role.
• Proven experience with SAST, DAST, IAST, and SCA tools.
• Strong understanding of OWASP Top 10 and remediation strategies.
• Proficiency in at least one programming language (Java, Python, C#, JS).

Responsibilities

• Conduct security architecture reviews and threat modeling for new apps and features.
• Perform security code reviews and static/dynamic testing (SAST/DAST).
• Develop and implement secure coding guidelines for development teams.
• Integrate security testing tools into the CI/CD pipeline.
• Identify, assess, and prioritize application security vulnerabilities.
• Collaborate with developers to remediate findings in a timely manner.
• Develop and deliver application security training to engineering teams.
• Respond to and investigate security incidents related to applications.
• Stay current with emerging app security threats and mitigation techniques.
• Contribute to security policies and procedures.

Skills

Application security

Threat modeling

Secure coding

CI/CD security

Vulnerability remediation

Education

Bachelor's degree in CS/SE/InfoSec

Tools

SAST tools

DAST tools

IAST tools

SCA tools

Job description

About the Role

Our client, a prominent e-commerce platform, is looking for a highly skilled Senior Application Security Engineer to join their expanding security team in Durban . This critical role involves ensuring the security of all applications throughout their lifecycle, from design and development to deployment and maintenance. You will work closely with development teams to embed security best practices, conduct security reviews, and identify and remediate vulnerabilities. This is a key position for an experienced security professional to make a significant impact on the security posture of a rapidly growing digital business within KwaZulu-Natal .

Key Responsibilities

• Conduct security architecture reviews and threat modeling for new applications and features.
• Perform security code reviews and static/dynamic application security testing (SAST/DAST).
• Develop and implement security best practices and secure coding guidelines for development teams.
• Integrate security testing tools into the CI/CD pipeline.
• Identify, assess, and prioritize application security vulnerabilities.
• Collaborate with developers to remediate security findings in a timely manner.
• Develop and deliver application security training to engineering teams.
• Respond to and investigate security incidents related to applications.
• Stay current with emerging application security threats, vulnerabilities, and mitigation techniques.
• Contribute to the development and maintenance of security policies and procedures.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related field.
• Minimum of 7 years of experience in application security, secure software development, or a related role.
• Proven experience with SAST, DAST, IAST, and SCA tools.
• Strong understanding of common web application vulnerabilities (e.g., OWASP Top 10) and their remediation.
• Proficiency in at least one programming language (e.g., Java, Python, C#, JavaScript).
• Experience with cloud security concepts (AWS, Azure, GCP) and container security (Docker, Kubernetes).
• Excellent communication and collaboration skills, with the ability to work effectively with development teams.
• Experience with CI/CD tools and integrating security into DevOps processes.
• Strong analytical and problem-solving skills.
• Willingness to be based in Durban and work on-site.

Benefits

Our client offers a competitive salary and benefits package, including comprehensive medical aid, a provident fund, and potential for performance-based bonuses. The company is committed to employee growth, offering ample opportunities for professional development, including certifications and training. This is an on-site position located in Durban , providing direct engagement with development teams and a tangible impact on application security for a leading e-commerce business in KwaZulu-Natal .