Senior Application Security Specialist

About the Role Our client, a leading innovator in financial technology based in **Kimberley**, is seeking a Senior Application Security Specialist to champion secure software development practices across their organization. This role is instrumental in embedding security throughout the software development lifecycle (SDLC), from design and coding to testing and deployment. You will work closely with development teams to identify, assess, and mitigate security vulnerabilities in web and mobile applications. The ideal candidate will have a strong understanding of common application security risks, secure coding principles, and the ability to conduct thorough security code reviews and penetration tests. This position offers a hybrid work arrangement, combining remote flexibility with in-office collaboration at our **Kimberley, Northern Cape, ZA** facility.Key Responsibilities
Integrate security practices into the entire SDLC, including threat modeling, security requirements gathering, and secure design reviews.Conduct security code reviews to identify vulnerabilities and provide remediation guidance to developers.Perform application penetration testing to discover and exploit security weaknesses.Develop and maintain secure coding guidelines and best practices for various programming languages and frameworks.Provide training and guidance to development teams on application security best practices.Evaluate and implement security tools, such as SAST, DAST, and IAST, to automate security testing.Respond to and investigate application security incidents.Stay current with emerging application security threats, vulnerabilities, and technologies.Collaborate with product managers, developers, and QA engineers to ensure the delivery of secure software.Requirements
Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.Minimum of 4 years of experience in application security, secure software development, or penetration testing.Proven experience in performing security code reviews and application penetration testing.Deep understanding of common web and mobile application vulnerabilities (e.G., OWASP Top 10).Familiarity with secure coding principles and frameworks.Experience with security testing tools (SAST, DAST, IAST, SCA).Knowledge of cryptography, authentication, and authorization mechanisms.Strong programming skills in one or more languages relevant to the client's stack (e.G., Java, Python, JavaScript, C#).Excellent communication, collaboration, and problem-solving skills.Relevant certifications like CSSLP, CEH (AppSec track), or OSCP are beneficial.This role requires a hybrid work model in **Kimberley, Northern Cape, ZA**.Benefits
An attractive annual salary of ** R**.Hybrid work model offering a balance of remote and office-based work.Comprehensive health, dental, and vision insurance.Contributions to a retirement fund.Opportunities for continuous learning, professional development, and advanced training.Performance-based bonuses.A dynamic and innovative work environment in **Kimberley**.
#J-18808-Ljbffr