Senior Application Security Engineer

Placements24; Gqeberha; Hybride; ZAR 900 000 - 1 300 000; Plein temps

Avantages offerts par ce poste

Annual bonus

Stock options

Health insurance

Retirement plan

Paid time off

Learning opportunities

Résumé du poste

Placements24 in Port Elizabeth, Eastern Cape, seeks a Senior Application Security Engineer to embed security into the SDLC, conduct DAST and SAST, and mentor developers.

You will collaborate with software teams to implement secure coding practices, stay ahead of OWASP risks, and help select and deploy security tools for fintech applications with remote-friendly arrangements.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 5+ years of experience in application security engineering.
• Proficiency in secure coding and OWASP Top 10.
• Experience with SAST and DAST tools (SonarQube, ZAP, Burp Suite).
• Knowledge of Agile/DevOps lifecycles and cloud security (AWS, Azure).

Responsabilités

• Integrate security practices into the SDLC from design to deployment.
• Conduct security reviews of architecture and code to identify vulnerabilities.
• Perform DAST and SAST testing.
• Educate developers on secure coding practices and remediation.
• Develop and maintain security testing tools and automation frameworks.
• Investigate and respond to security incidents and vulnerabilities.
• Stay current with emerging threats and best practices.
• Contribute to security policies and standards.
• Evaluate new security tools and technologies.
• Mentor junior security engineers and developers.

Connaissances

Secure coding principles

OWASP Top 10

SAST

DAST

Cloud security (AWS/Azure)

Programming languages (Java, Python, C

Formation

Bachelor's degree in Computer Science or Cybersecurity

Outils

SonarQube

OWASP ZAP

Burp Suite

Description du poste

About the Role

Our client, a prominent fintech company operating in Port Elizabeth, Eastern Cape , is seeking a highly skilled Senior Application Security Engineer. This role is critical in ensuring the security of our software development lifecycle (SDLC) by embedding security best practices, conducting security testing, and collaborating with development teams to build secure applications. The ideal candidate will have a strong understanding of secure coding principles, web application vulnerabilities, and modern application security tools and techniques. This is an exceptional opportunity to make a significant impact on the security of cutting-edge financial technology products in Port Elizabeth .

Key Responsibilities

• Integrate security practices into the SDLC, from design and development to testing and deployment.
• Conduct security reviews of application architecture and code to identify potential vulnerabilities.
• Perform dynamic application security testing (DAST) and static application security testing (SAST).
• Collaborate closely with software developers to educate them on secure coding practices and help remediate vulnerabilities.
• Develop and maintain security testing tools and automation frameworks.
• Investigate and respond to application security incidents and vulnerabilities.
• Stay current with emerging application security threats, vulnerabilities, and best practices.
• Contribute to the development and enforcement of application security policies and standards.
• Evaluate and recommend new application security tools and technologies.
• Mentor junior security engineers and developers on application security concepts.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 5 years of experience in application security engineering or a related cybersecurity role.
• Proficiency in secure coding principles and common web application vulnerabilities (e.g., OWASP Top 10).
• Experience with security testing tools such as SAST (e.g., SonarQube) and DAST (e.g., OWASP ZAP, Burp Suite).
• Strong understanding of software development lifecycles (Agile, DevOps).
• Familiarity with various programming languages (e.g., Java, Python, C#) and their security implications.
• Knowledge of cloud security principles (AWS, Azure) as they relate to applications.
• Excellent problem-solving, analytical, and communication skills.
• Relevant security certifications such as GWAPT, GWEB, CSSLP, or CISSP are a plus.
• Ability to work effectively in a Port Elizabeth, Eastern Cape based team, with the flexibility of remote work.

Benefits

• Our client offers a competitive salary package, including annual bonuses and potential for stock options.
• Employees receive comprehensive health insurance, a retirement savings plan, and generous paid time off.
• Opportunities for continuous learning, including advanced training, certifications, and attendance at industry conferences, are provided.
• The company culture is innovative, collaborative, and focused on employee growth.
• This role presents a significant opportunity to advance your career in application security with a leading fintech firm in Eastern Cape .