Senior AppSec Engineer - Remote, Secure DevOps

Placements24; Rustenburg; Hybrid; ZAR 900.000 - 1.300.000; Vollzeit

Benefits dieser Stelle

Health insurance

Retirement plan

Generous paid time off

Training & conferences

Remote work

Zusammenfassung

Placements24 is seeking a Senior Application Security Engineer to join a globally distributed, fully remote team. The role focuses on securing software across the lifecycle, embedding security into development, and building a security-first culture.

You will design controls, conduct reviews, perform SAST/DAST/SCA, and guide developers in secure coding. Cloud security, threat modeling, and DevSecOps integration are key aspects of the position.

Qualifikationen

• Degree in CS/SE/Cybersecurity or related field required.
• 5+ years in application security or secure software development.
• Strong knowledge of OWASP Top 10 and web vulns.
• Experience with SAST/DAST/SCA tools and cloud security.

Aufgaben

• Design and maintain security controls for apps.
• Review designs, code, and architecture for security gaps.
• Perform security testing (SAST/DAST/SCA).
• Enforce secure coding standards for developers.
• Remediate vulnerabilities with teams.
• Integrate security into CI/CD (DevSecOps).
• Provide security guidance and threat modeling training.
• Stay updated on app security threats and mitigations.
• Contribute to security architecture and best practices.
• Respond to application security incidents.

Kenntnisse

Secure coding

SAST/DAST/SCA

Cloud security

Threat modeling

CI/CD security

Cryptography

Java

Python

C#

JavaScript

Veracode

Checkmarx

SonarQube

Burp Suite

Ausbildung

Bachelor's or Master's in Computer Science / Software Engineering / Cybersecurity

Tools

Veracode

Checkmarx

SonarQube

Burp Suite

Jobbeschreibung

Placements24 is seeking a Senior Application Security Engineer to join a globally distributed, fully remote team. The role focuses on securing software across the lifecycle, embedding security into development, and building a security-first culture.

You will design controls, conduct reviews, perform SAST/DAST/SCA, and guide developers in secure coding. Cloud security, threat modeling, and DevSecOps integration are key aspects of the position.