Application Security Engineer

Role Purpose : Protect the Group's applications by identifying, assessing and reducing application security risks throughout the software lifecycle.

Key Responsibilities:

• Perform application security assessments, code reviews and security testing.
  
• Manage and optimize application security tools and processes, including Checkmarx.
  
• Conduct threat modelling and security architecture reviews for applications.
  
• Support remediation of OWASP and application-specific vulnerabilities.
  
• Assess APIs, web applications, mobile applications and other digital channels.
  
• Work with development teams to establish and enforce secure coding practices.
  
• Support security testing before production release.
  
• Maintain application security standards, metrics and risk reports.
  

Requirements

• Relevant degree or equivalent professional qualification in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.
  
• Relevant professional certifications will be an advantage and should align with the specific role.
  
• Demonstrable practical experience relevant to the position.
  
• Strong communication, analytical, documentation and stakeholder-management skills.
  
• Ability to operate in a regulated, technology-driven and multi-business environment.
  

Preferred / Added Advantage Certifications

• OSCP – Offensive Security Certified Professional
  
• eWPT or equivalent web application security certification
  
• CSSLP – Certified Secure Software Lifecycle Professional
  
• Checkmarx certification/training (advantage)
  

Benefits

Industry Standard