Senior Application Security Engineer

Placements24; East London; On-site; ZAR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Health benefits

Retirement plan

Performance bonuses

Professional development

Job summary

Placements24 in East London, SA seeks a Senior Application Security Engineer to safeguard software across the development lifecycle. You’ll work with development teams to identify and remediate vulnerabilities, implement secure coding practices, and conduct thorough security testing.

The role emphasizes hands-on assessments, collaboration with engineers, and ongoing security education to elevate the team’s security posture. Office-based position in East London with competitive benefits.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related discipline.
• Minimum of 5 years of experience in application security or software development with a strong security focus.
• Experience with security assessments and penetration testing of web applications, APIs, and mobile applications.
• In-depth knowledge of common web vulnerabilities (e.g., XSS, SQL injection, CSRF) and their mitigations.
• Experience with SAST and DAST tools (e.g., Veracode, Checkmarx, Burp Suite).
• Proficiency in at least one programming language (e.g., Java, Python, C#) and understanding of secure coding principles.
• Familiarity with cloud security principles (AWS, Azure, GCP) is a plus.
• Relevant certifications such as GWAPT, GWEB, CSSLP are advantageous.
• Excellent analytical, problem-solving, and communication skills.
• Office-based in East London, South Africa.

Responsibilities

• Integrate security into the Software Development Lifecycle (SDLC), including design, development, testing, and deployment.
• Conduct security reviews of application designs and code.
• Perform application vulnerability assessments and penetration testing using various tools and methodologies.
• Collaborate with developers to remediate security vulnerabilities identified.
• Develop and maintain secure coding guidelines and provide training to development teams.
• Evaluate and implement security tools for static and dynamic application security testing (SAST/DAST).
• Assist in the incident response process for application-related security breaches.
• Stay current with emerging application security threats and vulnerabilities (e.g., OWASP Top 10).
• Contribute to the development and maintenance of security policies and procedures related to application security.
• Champion a security-first mindset across all engineering teams.

Skills

Application security

Penetration testing

Secure coding

Cloud security

Education

Bachelor's degree in Computer Science or related field

Tools

Veracode

Checkmarx

Burp Suite

Job description

About the Role

Our client, a rapidly expanding software development company, is seeking a highly skilled Senior Application Security Engineer to join their dedicated security team. This role, based at our East London, Eastern Cape office, is critical for ensuring the security of our software products throughout the entire development lifecycle. You will work closely with development teams to identify and remediate vulnerabilities, implement secure coding practices, and conduct security testing. This is an office-based position, fostering close collaboration and knowledge sharing within our vibrant East London development hub.

Key Responsibilities

• Integrate security best practices into the Software Development Lifecycle (SDLC), including design, development, testing, and deployment.
• Conduct security reviews of application designs and code.
• Perform application vulnerability assessments and penetration testing using various tools and methodologies.
• Collaborate with developers to understand and remediate security vulnerabilities identified.
• Develop and maintain secure coding guidelines and provide training to development teams.
• Evaluate and implement security tools for static and dynamic application security testing (SAST/DAST).
• Assist in the incident response process for application-related security breaches.
• Stay current with emerging application security threats and vulnerabilities (e.g., OWASP Top 10).
• Contribute to the development and maintenance of security policies and procedures related to application security.
• Champion a security-first mindset across all engineering teams.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related discipline.
• Minimum of 5 years of experience in application security or software development with a strong security focus.
• Proven experience in conducting security assessments and penetration testing of web applications, APIs, and mobile applications.
• In-depth knowledge of common web vulnerabilities (e.g., XSS, SQL injection, CSRF) and their mitigation techniques.
• Experience with SAST and DAST tools (e.g., Veracode, Checkmarx, Burp Suite).
• Proficiency in at least one programming language (e.g., Java, Python, C#) and understanding of secure coding principles.
• Familiarity with cloud security principles (AWS, Azure, GCP) is a plus.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively both independently and collaboratively in an office environment in East London .
• Relevant certifications such as GWAPT, GWEB, CSSLP are advantageous.

Benefits

Our client offers a competitive salary, comprehensive health and retirement benefits, opportunities for professional development and training, performance bonuses, and a collaborative work culture focused on innovation and quality.