Application Security (Appsec) Engineer

About the Role

Our client, a rapidly growing software development company, is seeking an experienced Application Security (AppSec) Engineer to join their team in Nelspruit, Mpumalanga . This critical role will focus on integrating security throughout the software development lifecycle (SDLC), ensuring that applications are designed, built, and deployed securely. The AppSec Engineer will work closely with development teams to identify and remediate vulnerabilities, implement secure coding practices, and conduct security assessments of applications. This position offers a fantastic opportunity to shape the security of innovative software products in Nelspruit , with a flexible hybrid working model.

Key Responsibilities

• Collaborate with development teams to embed security best practices into the SDLC.
• Perform security reviews of application designs, code, and architecture.
• Conduct vulnerability assessments and penetration testing of web and mobile applications.
• Develop and implement security testing tools and frameworks (SAST, DAST, IAST).
• Provide guidance and training to developers on secure coding principles and practices.
• Investigate and remediate security vulnerabilities identified in applications.
• Develop and maintain application security policies and standards.
• Monitor security trends and emerging threats relevant to application security.
• Contribute to incident response activities related to application security incidents.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in software development or application security.
• Proven experience in performing security reviews, vulnerability assessments, and penetration testing of applications.
• Strong understanding of common web application vulnerabilities (OWASP Top 10) and mitigation techniques.
• Experience with SAST, DAST, and IAST tools.
• Proficiency in one or more programming languages (e.g., Java, Python, C#, JavaScript).
• Familiarity with cloud security concepts and CI/CD pipelines.
• Excellent communication and interpersonal skills, with the ability to work effectively with development teams.
• Relevant security certifications (e.g., CSSLP, CISSP) are a plus.

Benefits

Our client offers a competitive salary, comprehensive health benefits, a performance-based bonus, and a dedicated budget for professional development and certifications. The role provides a challenging and rewarding environment in Nelspruit, Mpumalanga , with a flexible hybrid work arrangement that balances office collaboration with remote flexibility. Employees benefit from working on innovative projects, a strong team culture, and opportunities for career growth within a dynamic technology company.

#J-18808-Ljbffr