Cybersecurity Specialist: Application Security (12-Month Contract)
IT – Analyst, Data Management ~ IT – Software Development ~ IT – Infrastructure
Cape Town – Western Cape – South Africa
ENVIRONMENT:
FOCUS on securing the development lifecycle of software applications and ensure that web applications are developed and deployed securely as the next Cybersecurity Specialist: Application Security wanted by a dynamic Energy Specialist. You will be responsible for the configuration, optimization, and maturing of Web Application Firewalls (WAFs) to protect the organization’s web applications from evolving threats. As the lead on Application Security, you will work closely with Development teams to integrate security into the software development lifecycle (SDLC) and ensure that all web applications meet industry security standards. This role requires in-depth knowledge of secure coding practices, Application Security Testing, and the ability to assess when additional Penetration Testing is necessary. Please note this is a 12-Month Contract.
DUTIES:
- Application Security and Secure Code Development.
- Security Testing and Penetration Testing.
- Web Application Security.
- Web Application Firewall (WAF) Management and Maturation.
- Incident Response for Application Security.
- Collaboration with Development and DevOps Teams.
- Documentation and Reporting.
- Stay current with Security Trends.
REQUIREMENTS:
Qualifications –
- Relevant Certifications such as CSSLP, CEH, OSWE, or GWAPT are preferred.
Experience/Skills –
- 5+ Years of experience in application security, secure software development, or a related Cybersecurity role.
- Strong knowledge of secure coding practices and common application security vulnerabilities (e.g., OWASP Top 10).
- Experience with static and dynamic application security testing (SAST, DAST) and other security testing tools (e.g., Burp Suite, OWASP ZAP).
- Hands-on experience with Web Application Firewalls (WAF) and their configuration, management, and optimization.
- Experience leading Penetration Tests and working with third-party vendors to conduct code and application security assessments.
- Familiarity with DevOps, CI/CD pipelines, and tools like Jenkins, Git, and Docker.