Senior Application Security Lead

Old Mutual Life Assurance Company (SA) Ltd (PFA); Johannesburg; Presencial; ZAR 900 000 - 1 500 000; Tempo integral

Resumo da oferta

Old Mutual Life Assurance Company (SA) Ltd (PFA) is seeking an Application Security Lead to steer the security of the software the business develops, buys and runs, across the secure development lifecycle, code and dependency scanning, application testing, third-party and SaaS security, application identity and access, and AI features.

You will lead the Application Security team, set standards, oversee tooling and testing, coordinate external penetration testing, and ensure secure release with

Qualificações

• National diploma or equivalent in Computer Science, Information Systems, Engineering, or related field.
• 5+ years in application security or security testing, with at least 3 years in a dedicated role.
• 2+ years leading a team or security workstream.
• Hands-on experience with SAST, SCA, DAST and secrets scanning in CI/CD.
• Knowledge of OWASP Top 10, OWASP ASVS, API Security Top 10, and SDLC controls (ISO 27001 or NIST CSF).
• Preferred: OSCP, CISSP or equivalent.

Responsabilidades

• Lead the Application Security team across secure development lifecycle and testing.
• Set security standards for developers and approve releases.
• Manage SAST/DAST/ SCA tooling and reduce false positives.
• Coordinate penetration tests with external providers and retest findings.
• Oversee security for third-party and SaaS applications and contractual security requirements.
• Oversee identity and access standards (SSO, MFA, OAuth/OIDC, API authentication).
• Oversee security reviews for AI integrations, prompt injection and API keys protection.

Conhecimentos

Application security

Team leadership

Threat modelling

SAST/DAST/ SCA

CI/CD security

Formação académica

Diploma in Computer Science/Info Systems/Engineering or equivalent

Ferramentas

SAST tooling

SCA tooling

DAST tooling

Secrets scanning tooling

CI/CD tooling

Descrição da oferta de emprego

Old Mutual Life Assurance Company (SA) Ltd (PFA) is seeking an Application Security Lead to steer the security of the software the business develops, buys and runs, across the secure development lifecycle, code and dependency scanning, application testing, third-party and SaaS security, application identity and access, and AI features.

You will lead the Application Security team, set standards, oversee tooling and testing, coordinate external penetration testing, and ensure secure release with