Senior Application Security Specialist

Placements24; Polokwane; Hybride; ZAR 900 000 - 1 500 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Remote work

Health benefits

Résumé du poste

Placements24 is seeking a Senior Application Security Specialist to embed security across the SDLC from a fully remote team. You will work with developers to remediate vulnerabilities, promote secure coding, and perform security testing on diverse apps.

Ideal candidates have 5+ years in app security, strong knowledge of OWASP Top 10, and experience with SAST/DAST/IAST. Cloud-native security, Agile experience, and security certifications are pluses.

Qualifications

• Bachelor's degree in CS or Cybersecurity.
• Minimum 5 years in application security or security engineering.
• Experience assessing web apps, APIs, mobile apps for security.
• Solid knowledge of common vulnerabilities (SQLi, XSS, buffers).
• Familiar with SAST/DAST/IAST tools and methods.
• Proficient in Java, Python, or C#, with secure coding principles.
• Experience securing cloud-native apps and microservices.
• Strong communication and stakeholder influence.
• Awareness of Agile development practices.
• Security certifications (CSSLP, GIAC-GWEB, CISSP) a plus.

Responsabilités

• Collaborate with development teams to embed security in the SDLC.
• Perform security reviews of designs, code and architectures.
• Conduct SAST, DAST, and IAST testing across apps.
• Identify, analyze and prioritize application vulnerabilities.
• Provide secure coding guidance to developers.
• Develop tools and processes to automate vulnerability detection.
• Respond to and assist in security incident investigations.
• Stay updated on emerging app security threats and tools.
• Contribute to security policies and standards.
• Advocate for security within the engineering organization.

Connaissances

Security testing

Secure coding

Communication

Agile

Influence teams

Formation

Bachelor's degree in Computer Science or Cybersecurity

Outils

SAST

DAST

IAST

OWASP Top 10

Description du poste

About the Role

Our client, a pioneer in the software development sector, is seeking a highly skilled Senior Application Security Specialist to join their fully remote engineering team. This crucial role involves embedding security into the software development lifecycle (SDLC) for a wide range of applications. You will work closely with development teams to identify and remediate vulnerabilities, implement secure coding practices, and conduct security testing. The ideal candidate possesses a deep understanding of application vulnerabilities, secure development principles, and the ability to collaborate effectively with distributed teams. This is a prime opportunity to shape the security of innovative software products from anywhere.

Key Responsibilities

• Collaborate with development teams throughout the SDLC to ensure security is integrated from the design phase onwards.
• Perform security reviews of application designs, code, and architectures.
• Conduct security testing, including static application security testing (SAST), dynamic application security testing (DAST), and interactive application security testing (IAST).
• Identify, analyze, and prioritize application vulnerabilities.
• Provide guidance and training to developers on secure coding practices and common vulnerabilities (e.g., OWASP Top 10).
• Develop and implement security tools and processes to automate vulnerability detection and remediation.
• Respond to and assist in the investigation of application security incidents.
• Stay current with emerging application security threats, tools, and techniques.
• Contribute to the development and maintenance of application security policies and standards.
• Act as a security advocate within the engineering organization.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 5 years of experience in application security, software development, or a related security engineering role.
• Proven experience in performing security assessments of web applications, APIs, and mobile applications.
• In-depth knowledge of common application vulnerabilities, such as SQL injection, cross-site scripting (XSS), and buffer overflows.
• Familiarity with SAST, DAST, and IAST tools and methodologies.
• Proficiency in at least one programming language (e.g., Java, Python, C#) and understanding of secure coding principles.
• Experience with security best practices for cloud-native applications and microservices architectures.
• Excellent communication and interpersonal skills, with the ability to influence development teams.
• Experience working in an Agile development environment.
• Relevant security certifications such as CSSLP, GIAC-GWEB, or CISSP are a plus.

Benefits

This fully remote position offers a highly competitive salary, comprehensive health and wellness benefits, and a flexible work environment. Our client provides excellent opportunities for continuous learning, professional development, and obtaining industry certifications. Join a forward-thinking company that is dedicated to building secure software and fostering a strong security culture. Enjoy the autonomy and work-life balance of a remote role while contributing to the security of critical applications.