Senior .NET Security Engineer - SDLC & Cloud

Sabenza IT & Recruitment; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Sabenza IT & Recruitment is seeking a Security Engineer in Johannesburg, South Africa, to embed secure coding and SDLC practices across projects. You will collaborate with software engineers, architects, DevOps, and stakeholders to identify risks, implement controls, and embed security throughout the lifecycle.

The role focuses on hands-on application security within the .NET ecosystem, including secure code reviews, vulnerability management, and cloud security in Azure environments.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Azure security certifications are advantageous.
• Industry security certifications (Security+, SSCP, CEH, AZ-500, CSSLP) are advantageous.

Responsibilities

• Embed security best practices Across the SDLC and threat modeling.
• Conduct security reviews of designs, architecture, and codebases.
• Identify, assess, and remediate application security vulnerabilities.
• Perform secure code reviews for .NET applications and guide remediation.
• Support authentication, authorization, encryption, and secure comms.
• Configure and maintain security tooling for static/dynamic testing.
• Collaborate with teams to address issues from assessments and pentests.
• Support security risk assessments for new and existing solutions.
• Develop and maintain security standards, guidelines, and secure coding practices.
• Assist with security incident investigation and root-cause analysis.

Skills

Secure SDLC

Threat modelling

Code reviews

Vulnerability management

DevOps & CI/CD

Azure DevOps

Git

Docker

Security scanning

Identity & Access

Education

Bachelor's degree in CS/Info Sec/Engineering

Tools

OWASP ZAP

Burp Suite

SonarQube

Postman

Microsoft Entra ID

Job description

Sabenza IT & Recruitment is seeking a Security Engineer in Johannesburg, South Africa, to embed secure coding and SDLC practices across projects. You will collaborate with software engineers, architects, DevOps, and stakeholders to identify risks, implement controls, and embed security throughout the lifecycle.

The role focuses on hands-on application security within the .NET ecosystem, including secure code reviews, vulnerability management, and cloud security in Azure environments.