Senior Application Security Engineer

Placements24; Stellenbosch; Hybrid; ZAR 900,000 - 1,400,000; Full time

Benefits offered by this job

Competitive salary

Equity options

Health benefits

Flexible work arrangements

Training and conferences

Retirement plan

Job summary

Placements24 in Paarl, Western Cape, is seeking a Senior Application Security Engineer to embed security across the SDLC and protect web and mobile apps. You will lead security assessments, drive secure coding, and partner with Dev teams to implement DevSecOps practices in a fast-growing FinTech environment.

Applicants should have 5+ years of application security, strong OWASP knowledge, experience with SAST/DAST/IAST, cloud platforms, and programming in Python/Java/JavaScript.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field.
• Minimum of 5 years of experience in application security engineering or a related security role.
• Demonstrated experience with security testing tools (SAST, DAST, IAST, SCA) and methodologies.
• In-depth knowledge of common web vulnerabilities (OWASP Top 10) and mobile security risks.
• Proficiency in at least one programming language (Python, Java, JavaScript).
• Experience with cloud platforms (AWS, Azure, GCP) and container security (Docker, Kubernetes) is a plus.

Responsibilities

• Integrate security into the entire SDLC, working with development teams to ensure secure design and coding practices.
• Conduct security assessments, code reviews, and vulnerability testing for web and mobile applications.
• Identify, prioritize, and track application security vulnerabilities through to remediation.
• Develop and maintain security tools and automation for scanning, testing, and monitoring applications.
• Implement and manage security controls within CI/CD pipelines (DevSecOps).
• Provide guidance and training to development teams on application security best practices and secure coding standards.
• Stay current with emerging application security threats, vulnerabilities, and technologies.
• Contribute to the development and enforcement of application security policies and standards.
• Participate in security architecture reviews for new application features and services.
• Respond to and investigate security incidents related to applications.

Skills

Application security

Security testing

DevSecOps

Cloud security

Programming (Python/Java/JS)

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SAST tools

DAST tools

IAST tools

SCA tools

Jenkins

GitLab CI

Docker

Kubernetes

Job description

About the Role

About the Role Our client, a dynamic FinTech startup based in Paarl, Western Cape , is looking for a Senior Application Security Engineer to bolster their security capabilities. This role is integral to embedding security throughout the software development lifecycle (SDLC), from design to deployment and maintenance. You will work closely with development teams to identify and mitigate application vulnerabilities, implement secure coding practices, and champion security best practices. The ideal candidate has a proven track record in securing web and mobile applications, a strong understanding of common vulnerabilities, and experience with DevSecOps principles. This is a fantastic opportunity to influence security strategy at an early stage within a rapidly growing company in Paarl, Western Cape . You will be instrumental in ensuring the security and integrity of our client's innovative financial products. Join us and help build a secure foundation for future growth and customer trust. Your contributions will be highly valued in shaping our security culture.

Key Responsibilities

• Integrate security into the entire SDLC, working with development teams to ensure secure design and coding practices.
• Conduct security assessments, code reviews, and vulnerability testing for web and mobile applications.
• Identify, prioritize, and track application security vulnerabilities through to remediation.
• Develop and maintain security tools and automation for scanning, testing, and monitoring applications.
• Implement and manage security controls within CI/CD pipelines (DevSecOps).
• Provide guidance and training to development teams on application security best practices and secure coding standards.
• Stay current with emerging application security threats, vulnerabilities, and technologies.
• Contribute to the development and enforcement of application security policies and standards.
• Participate in security architecture reviews for new application features and services.
• Respond to and investigate security incidents related to applications.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field.
• Minimum of 5 years of experience in application security engineering or a related security role.
• Demonstrated experience with security testing tools (e.g., SAST, DAST, IAST, SCA) and methodologies.
• In-depth knowledge of common web vulnerabilities (OWASP Top 10) and mobile security risks.
• Proficiency in at least one programming language (e.g., Python, Java, JavaScript).
• Experience with cloud platforms (AWS, Azure, GCP) and container security (Docker, Kubernetes) is a plus.
• Familiarity with DevSecOps principles and tools (e.g., Jenkins, GitLab CI, Docker).
• Strong understanding of cryptography, authentication, and authorization mechanisms.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaborate effectively with cross-functional teams.

Benefits

• Competitive salary and equity options.
• Comprehensive health, dental, and vision benefits.
• Generous paid time off and flexible work arrangements.
• Opportunities for professional development, training, and conference attendance.
• Retirement savings plan.
• Opportunity to work in a fast-paced, innovative FinTech environment in Paarl, Western Cape .
• Direct impact on the security of cutting-edge financial products.
• Dynamic company culture with regular team events.
• Stock options for employees.
• Life and disability insurance.