Descripción de la oferta
About the Role
Our client, a growing software development firm, is seeking an Information Security Specialist with a focus on Application Security. This role, located in Queenstown, Eastern Cape , is vital for ensuring the security of our client's software products throughout the development lifecycle. You will work closely with development teams to embed security best practices, conduct security testing, and remediate vulnerabilities in applications. The ideal candidate will have a strong understanding of secure coding principles, common application vulnerabilities, and security testing methodologies. This is an excellent opportunity to contribute to building secure software from the ground up.
Key Responsibilities
Integrate security into the software development lifecycle (SDLC), from design to deployment.
Conduct threat modeling for new and existing applications.
Perform static (SAST) and dynamic (DAST) application security testing.
Identify, analyze, and prioritize application security vulnerabilities.
Work with developers to remediate identified vulnerabilities and provide guidance on secure coding practices.
Develop and maintain application security standards and guidelines.
Educate development teams on secure coding principles and common threats (e.g., OWASP Top 10).
Assist in security reviews of third-party components and libraries.
Contribute to the development and maintenance of security testing tools and frameworks.
Stay current with emerging application security threats and vulnerabilities.
Support incident response activities related to application security breaches.
Participate in code reviews from a security perspective.
Requirements
Bachelor's degree in Computer Science, Software Engineering, or a related field; relevant security certifications (e.g., CSSLP, GWAPT) are advantageous.
Minimum of 3 years of experience in information security, with a specialization in application security.
Strong understanding of secure software development principles and methodologies (SDLC, Agile).
Hands-on experience with SAST and DAST tools (e.g., Veracode, Checkmarx, Burp Suite).
Knowledge of common web application vulnerabilities and their mitigation techniques.
Proficiency in at least one programming language (e.g., Java, Python, C#).
Familiarity with security in cloud environments (AWS, Azure) and container technologies.
Excellent analytical, problem-solving, and communication skills.
Ability to collaborate effectively with development teams and stakeholders.
Experience with API security testing and understanding of authentication/authorization mechanisms.
Benefits
Our client offers a competitive salary and benefits package, including medical aid and retirement contributions.
We provide opportunities for professional development, including training courses and support for security certifications.
This role is based at our office in Queenstown, Eastern Cape , with a flexible hybrid work arrangement.
You'll be part of a collaborative and innovative team focused on delivering high-quality, secure software.
We are committed to fostering a positive work environment and supporting our employees' professional growth and well-being.
#J-18808-Ljbffr
