Cape Town: Senior Application/Platform Security Engineer posted by Sabenza IT & Recruitment

Role Purpose
The Senior Application/Platform Security Engineer is responsible for designing, implementing, and managing advanced security measures to safeguard the organizations applications and platforms. This role focuses on proactively identifying, mitigating, and managing risks, while embedding security best practices throughout the software development lifecycle (SDLC).

Key Responsibilities
Design, implement, and oversee robust security measures for applications and platforms.
Lead comprehensive security risk assessments, penetration testing, and vulnerability analysis.
Develop, implement, and maintain security policies, standards, and best practices.
Collaborate closely with development and operations teams to ensure security is integrated across the SDLC.
Evaluate, recommend, and deploy security tools, technologies, and frameworks.
Monitor emerging cybersecurity threats, trends, and technologies to maintain a proactive security posture.
Investigate and respond to security incidents, ensuring effective resolution and continuous improvement.
Provide technical leadership, mentorship, and knowledge sharing to Mid and Junior Security Engineers.
Prepare detailed technical documentation and compliance reports.
Support organizational compliance with relevant security and regulatory standards (e.g., ISO 27001, GDPR, NIST).

Requirements

• NQF Level 6 or a Degree in Information Communication Technology (ICT) or a related field (e.g., Information Systems, Computer Science, Cybersecurity).
  
• Relevant Certifications: Microsoft Security, Oracle, or AWS Security Certification (or equivalent industry-recognized credentials).
  
• Minimum of 5 years experience as a Senior Application/Platform Security Engineer or in a similar advanced security engineering role.
  
• Proven experience leading complex security initiatives and implementing enterprise-level security solutions.
  
• Key Skills & Competencies (for PNet/CareerJunction posting):
  
• Application and Platform Security Architecture
  
• Vulnerability Assessment & Penetration Testing
  
• Security Risk Management & Compliance (ISO 27001, NIST, GDPR)
  
• Secure SDLC / DevSecOps Integration
  
• Cloud Security (AWS, Azure, Oracle Cloud)
  
• Authentication, Encryption & Identity Management
  
• Threat Detection, Incident Response & Mitigation
  
• Security Tools & Frameworks (SIEM, DAST, SAST, IDS/IPS)