Senior Application Security Engineer

Overview

Senior Application Security Engineer at DigiCert. This on-site role based in Port Elizabeth, South Africa focuses on securing DigiCert's software applications across the software development lifecycle. You will perform threat modeling, code reviews, and security testing, and collaborate with product and engineering teams to remediate vulnerabilities and improve secure coding practices.

Responsibilities

• Conduct threat modeling for new features and systems
• Perform security reviews of designs and code
• Lead static and dynamic analysis, security testing, and vulnerability remediation
• Collaborate with engineering teams to implement secure by design practices
• Develop and maintain secure development lifecycle processes
• Monitor security incidents and coordinate incident response
• Mentor junior security engineers as needed

Qualifications

• 5+ years in Application Security or related field
• Strong knowledge of OWASP Top Ten and secure coding practices
• Experience with penetration testing tools and methodologies
• Familiarity with SDLC security processes and risk assessment
• Cloud security experience (AWS, Azure, or GCP) is a plus
• Bachelor's degree in Computer Science, Cybersecurity, or related field; or equivalent experience
• Excellent communication and collaboration skills