Senior Application Security Engineer

Placements24; Rustenburg; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Generous paid time off

Training & conferences

Remote work

Job summary

Placements24 is seeking a Senior Application Security Engineer to join a globally distributed, fully remote team. The role focuses on securing software across the lifecycle, embedding security into development, and building a security-first culture.

You will design controls, conduct reviews, perform SAST/DAST/SCA, and guide developers in secure coding. Cloud security, threat modeling, and DevSecOps integration are key aspects of the position.

Qualifications

• Degree in CS/SE/Cybersecurity or related field required.
• 5+ years in application security or secure software development.
• Strong knowledge of OWASP Top 10 and web vulns.
• Experience with SAST/DAST/SCA tools and cloud security.

Responsibilities

• Design and maintain security controls for apps.
• Review designs, code, and architecture for security gaps.
• Perform security testing (SAST/DAST/SCA).
• Enforce secure coding standards for developers.
• Remediate vulnerabilities with teams.
• Integrate security into CI/CD (DevSecOps).
• Provide security guidance and threat modeling training.
• Stay updated on app security threats and mitigations.
• Contribute to security architecture and best practices.
• Respond to application security incidents.

Skills

Secure coding

SAST/DAST/SCA

Cloud security

Threat modeling

CI/CD security

Cryptography

Java

Python

C#

JavaScript

Veracode

Checkmarx

SonarQube

Burp Suite

Education

Bachelor's or Master's in Computer Science / Software Engineering / Cybersecurity

Tools

Veracode

Checkmarx

SonarQube

Burp Suite

Job description

About the Role

Our client, a prominent software development company, is seeking a highly skilled and motivated Senior Application Security Engineer to join their globally distributed team. This is a fully remote position, offering the flexibility to work from anywhere. You will be instrumental in ensuring the security of our client's software applications throughout the entire development lifecycle, from design and coding to deployment and maintenance. The ideal candidate will possess deep expertise in secure coding practices, vulnerability assessment, and security architecture for applications. Your role will be critical in protecting our software products and our users' data from evolving cyber threats. You will collaborate closely with development teams to embed security into their processes and build a strong security culture.

Key Responsibilities

• Design, implement, and maintain security controls and practices for software applications.
• Conduct security reviews of application designs, code, and architecture to identify vulnerabilities.
• Perform security testing, including static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA).
• Develop and enforce secure coding standards and guidelines for developers.
• Collaborate with development teams to remediate identified security vulnerabilities.
• Integrate security tools and processes into the CI/CD pipeline (DevSecOps).
• Provide security guidance and training to development teams on secure coding practices and threat modeling.
• Stay current with emerging application security threats, vulnerabilities, and mitigation techniques.
• Contribute to the development and maintenance of application security architecture and best practices.
• Respond to and investigate security incidents related to applications.

Requirements

• Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• 5+ years of experience in application security engineering or a related software development security role.
• In-depth knowledge of secure coding principles (e.g., OWASP Top 10) and common web application vulnerabilities.
• Experience with SAST, DAST, and SCA tools (e.g., Veracode, Checkmarx, SonarQube, Burp Suite).
• Proficiency in at least one programming language (e.g., Java, Python, C#, JavaScript).
• Experience with cloud security concepts and implementing security in cloud-native applications (AWS, Azure, GCP).
• Strong understanding of cryptographic principles and secure authentication/authorization mechanisms.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills, with the ability to work effectively in a remote team.
• Relevant certifications such as CSSLP, CISSP, or GWAPT are a plus.

Benefits

• This fully remote position offers a highly competitive salary and a comprehensive benefits package, including health insurance, a retirement savings plan, and generous paid time off.
• Our client is dedicated to fostering employee growth and provides opportunities for advanced training, conference attendance, and certification.
• You will have the opportunity to work on cutting-edge software development projects and make a significant impact on application security across the organization.
• Work from your home office and be part of a forward-thinking, security-conscious company.