Application Security Engineer

Role Purpose: Protect the Group's applications by identifying, assessing and reducing application security risks throughout the software lifecycle.

Key Responsibilities:

• Perform application security assessments, code reviews and security testing.

• Manage and optimize application security tools and processes, including Checkmarx.

• Conduct threat modelling and security architecture reviews for applications.

• Support remediation of OWASP and application-specific vulnerabilities.

• Assess APIs, web applications, mobile applications and other digital channels.

• Work with development teams to establish and enforce secure coding practices.

• Support security testing before production release.

• Maintain application security standards, metrics and risk reports.

Requirements

• Relevant degree or equivalent professional qualification in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.

• Relevant professional certifications will be an advantage and should align with the specific role.

• Demonstrable practical experience relevant to the position.

• Strong communication, analytical, documentation and stakeholder-management skills.

• Ability to operate in a regulated, technology-driven and multi-business environment.

Preferred / Added Advantage Certifications

• OSCP – Offensive Security Certified Professional

• eWPT or equivalent web application security certification

• CSSLP – Certified Secure Software Lifecycle Professional

• Checkmarx certification/training (advantage)

Benefits

Industry Standard