What Application Security Jobs are in South Africa?

Our client, a rapidly expanding software development company, is seeking an experienced Application Security Specialist to enhance the security of their software products. This role is critical in integrating security best practices throughout the software development lifecycle (SDLC), from design to deployment. You will work closely with development teams to identify and mitigate security vulnerabilities in applications, conduct security testing, and provide guidance on secure coding practices. This is a remote position, offering the flexibility to work from anywhere. The ideal candidate is passionate about application security and possesses a strong understanding of common web vulnerabilities and secure coding principles.

• Integrate security considerations into the entire SDLC, including design, development, testing, and deployment.
• Conduct security reviews of application designs and code.
• Perform security testing, including static application security testing (SAST) and dynamic application security testing (DAST).
• Identify, analyze, and document application security vulnerabilities.
• Provide actionable recommendations and guidance to development teams for remediating security flaws.
• Develop and maintain secure coding guidelines and best practices.
• Stay current with emerging application security threats and vulnerabilities.
• Assist in security incident response related to application breaches.
• Develop and deliver application security training to development teams.
• Collaborate with QA and DevOps teams to ensure security is embedded in automated pipelines.

• Bachelor's degree in Computer Science, Software Engineering, or a related field, or equivalent experience.
• Minimum of 4 years of experience in application security, software development, or a related role.
• Strong understanding of common web application vulnerabilities (e.g., OWASP Top 10) and mitigation techniques.
• Experience with SAST and DAST tools (e.g., Veracode, Checkmarx, Burp Suite Pro).
• Proficiency in at least one programming language (e.g., Java, Python, C#, JavaScript).
• Familiarity with secure SDLC methodologies and DevSecOps principles.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills, with the ability to work effectively in a remote team.
• Experience with cloud security (AWS, Azure) is a plus.
• Relevant security certifications (e.g., CSSLP, GWAPT) are advantageous.

Our client offers a highly competitive salary and comprehensive benefits package. This role provides the significant advantage of being fully remote, allowing for exceptional work-life balance and flexibility. You will have the opportunity to work with innovative technologies and influence the security of cutting-edge applications. We foster a culture of continuous learning and provide resources for professional development. Join a forward-thinking company committed to building secure software from the ground up.

Our client, a fast-growing software development company located in Randburg, Gauteng , is seeking an experienced Senior Application Security Specialist . This role is crucial for embedding security best practices throughout the software development lifecycle (SDLC). You will work closely with development teams to identify and mitigate security vulnerabilities in our applications, ensuring the delivery of secure and robust software products. As a key member of our security team, you will play a vital role in protecting our intellectual property and customer data. This is an on-site position requiring dedicated collaboration within our development hub.

• Perform security assessments of web and mobile applications, including threat modeling and code reviews.
• Identify security vulnerabilities in applications and provide clear, actionable remediation guidance to development teams.
• Develop and implement secure coding guidelines and standards.
• Integrate security testing tools (SAST, DAST, IAST) into the CI/CD pipeline.
• Educate and mentor developers on secure coding practices and common vulnerabilities (e.g., OWASP Top 10).
• Contribute to the development and maintenance of the application security program.
• Stay current with emerging application security threats and trends.
• Participate in security architecture reviews for new features and products.
• Assist in incident response activities related to application breaches.
• Collaborate with QA teams to ensure security test coverage.

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• Minimum of 5 years of experience in application security, secure coding, or penetration testing.
• In-depth knowledge of web application security vulnerabilities and mitigation techniques (e.g., OWASP Top 10, SANS CWE).
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP, Veracode, Checkmarx).
• Proficiency in at least one programming language (e.g., Java, Python, C#, JavaScript).
• Understanding of SDLC and Agile methodologies, with experience in DevSecOps practices.
• Experience with cloud-native security (AWS, Azure, GCP) is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with development teams.
• Ability to work independently and manage multiple projects in a demanding environment.
• Relevant certifications such as GWAPT, CISSP, or CSSLP are highly desirable.

Our client offers a highly competitive salary, comprehensive medical and dental coverage, and a generous retirement plan. Employees benefit from a stimulating work environment focused on innovation and continuous learning in our Randburg offices. We provide significant opportunities for professional growth, including training budgets, conference attendance, and support for advanced certifications. You will have the chance to work on cutting-edge software products and make a significant impact on the company's security posture. We believe in investing in our employees and offer clear career advancement paths. Regular performance reviews and feedback ensure your development is supported.

Our client, a prominent e-commerce enterprise situated in the vibrant city of Cape Town , is actively recruiting a Lead Penetration Tester with deep expertise in application security. This role is crucial for identifying and mitigating vulnerabilities within our web and mobile applications before they can be exploited by malicious actors. As the Lead, you will guide a team of security professionals, design comprehensive testing strategies, and communicate findings to both technical and non-technical stakeholders. You will be at the forefront of ensuring the security posture of our customer-facing platforms, playing an instrumental role in building trust and maintaining operational integrity. The ideal candidate will possess a strong ethical hacking background and a passion for cutting-edge security practices. This is an opportunity to make a significant impact in a fast-paced, innovative environment within Cape Town .

• Lead and execute comprehensive penetration tests on web applications, mobile applications, APIs, and network infrastructure.
• Develop and refine penetration testing methodologies and frameworks to identify complex vulnerabilities.
• Conduct manual security testing, code reviews, and vulnerability assessments.
• Analyze test results, document findings in detailed reports, and provide actionable recommendations for remediation.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Mentor and guide junior penetration testers, fostering their technical and professional growth.
• Stay updated with the latest vulnerability exploits, attack techniques, and security trends.
• Present security findings and recommendations to senior management and technical teams.
• Develop proof-of-concept exploits to demonstrate the impact of identified vulnerabilities.
• Contribute to the development of security awareness training programs.

• Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• A minimum of 7 years of experience in penetration testing and application security.
• Demonstrated expertise in OWASP Top 10 vulnerabilities, SQL injection, XSS, CSRF, and other common web/mobile exploits.
• Proficiency with penetration testing tools such as Burp Suite, Metasploit, Nmap, and Kali Linux.
• Experience with scripting languages (e.g., Python, JavaScript) for security automation and exploit development.
• Strong understanding of secure coding practices and SDLC.
• Relevant certifications like OSCP, OSCE, CISSP, or CEH are highly preferred.
• Excellent analytical, reporting, and communication skills, with the ability to articulate technical risks effectively.
• Proven leadership experience and the ability to manage a team.
• Must be willing to work full-time in our Cape Town office.

Our client offers an attractive remuneration package including a competitive base salary, annual bonus, and a comprehensive medical aid plan. Professional development is strongly encouraged, with support for further certifications and conference attendance. Employees will enjoy a dynamic work environment in a prime Cape Town location, with ample opportunities for career progression within the security domain. This role provides the chance to work with cutting-edge technologies and contribute to the security of a major online platform.

• Performing security code reviews to identify vulnerabilities and provide guidance on secure coding practices.
• Integrating security testing tools (SAST, DAST, IAST) into the CI/CD pipeline.
• Conducting threat modeling for new features and applications.
• Developing and maintaining security automation scripts.
• Collaborating with developers to fix identified security vulnerabilities.
• Providing security guidance and training to development teams.
• Researching and staying current with emerging application security threats and vulnerabilities.
• Assisting in incident response activities related to application security breaches.
• Developing and implementing security policies and best practices for application development.
• Evaluating and recommending new application security tools and technologies.

• A Bachelor's degree in Computer Science, Software Engineering, or a related field, or equivalent practical experience.
• A minimum of 3 years of experience in application security, software development, or a related security engineering role.
• Strong understanding of common web vulnerabilities (e.g., OWASP Top 10) and their mitigation.
• Proficiency in at least one programming language (e.g., Python, Java, C#, Go) and experience with secure coding practices.
• Experience with security testing tools (SAST, DAST) and CI/CD pipelines.
• Knowledge of cryptography, authentication, and authorization mechanisms.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills, with the ability to work effectively in a remote team.
• Familiarity with cloud security concepts (AWS, Azure, GCP) is a plus.
• Relevant certifications like CSSLP, GWAPT, or GWEB are advantageous.

• Integrate security best practices into the software development lifecycle (SDLC), from design to deployment.
• Conduct security code reviews and static application security testing (SAST) to identify vulnerabilities.
• Perform dynamic application security testing (DAST) and penetration testing on web applications and APIs.
• Work with development teams to understand, prioritize, and remediate identified security vulnerabilities.
• Develop and maintain secure coding guidelines and provide training to developers.
• Evaluate and implement security tools and technologies for application security testing and monitoring.
• Stay up-to-date with emerging application security threats, vulnerabilities, and industry trends.
• Contribute to threat modeling exercises for new and existing applications.
• Develop and maintain security documentation related to applications and their controls.
• Collaborate with other security teams to ensure holistic security coverage.

• Bachelor's degree in Computer Science, Software Engineering, or a related field.
• Minimum of 5 years of experience in software development or application security.
• Proven experience in secure coding practices and common web vulnerabilities (e.g., OWASP Top 10).
• Hands-on experience with SAST and DAST tools (e.g., Veracode, Checkmarx, Burp Suite).
• Familiarity with cloud security concepts (AWS, Azure, GCP) as they relate to application deployment.
• Strong understanding of API security principles.
• Excellent communication, collaboration, and problem-solving skills.
• Experience working in an Agile development environment is preferred.
• Relevant certifications such as CSSLP or GIAC GWAPT are a plus.
• Ability to work effectively in a hybrid model, based in or near Polokwane, Limpopo .

Our client, a rapidly growing SaaS company, is looking for a skilled Remote Application Security Engineer to embed security practices throughout their Software Development Lifecycle (SDLC). This fully remote position will involve working closely with development teams to identify and mitigate security vulnerabilities in web and mobile applications, APIs, and cloud-based services. You will be responsible for implementing security controls, conducting code reviews, performing security testing, and providing guidance to developers on secure coding techniques. The ideal candidate is passionate about building secure software from the ground up and has a strong understanding of common application vulnerabilities and modern security tools. This role offers the flexibility to work from anywhere while contributing to the security of innovative software products.

• Integrate security into the CI/CD pipeline and automated testing processes.
• Conduct security assessments, threat modeling, and penetration testing of applications.
• Perform static and dynamic application security testing (SAST/DAST).
• Review code for security vulnerabilities and provide remediation guidance to developers.
• Develop and maintain security standards, guidelines, and best practices for application development.
• Collaborate with development teams to address security findings and implement fixes.
• Research and stay updated on emerging application security threats and vulnerabilities.
• Develop and deliver security training to engineering teams.
• Contribute to the selection and implementation of application security tools.
• Act as a security champion within the engineering organization.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 5 years of experience in application security or software development with a security focus.
• Strong understanding of common web application vulnerabilities (OWASP Top 10) and mitigation techniques.
• Experience with SAST/DAST tools (e.g., Veracode, Checkmarx, SonarQube) and penetration testing methodologies.
• Proficiency in at least one programming language (e.g., Python, Java, JavaScript).
• Familiarity with cloud security principles (AWS, Azure, GCP) is a plus.
• Experience with secure coding practices and secure SDLC implementation.
• Excellent communication and collaboration skills, with the ability to work effectively in a remote team.
• Relevant security certifications (e.g., GWAPT, GWEB, CSSLP) are advantageous.
• This is a fully remote position requiring a self-starter mentality and strong organizational skills.

This fully remote position offers a competitive salary, comprehensive health insurance, stock options, and a flexible work schedule. We provide a generous budget for professional development, including conferences, training, and certifications. Employees enjoy the freedom to work from anywhere, with opportunities to collaborate with a diverse and talented team. Our client fosters a culture of innovation and continuous learning, making this an exciting opportunity for career growth in application security.