Cape Town: Mid-Level Application/Platform Security Engineer posted by Sabenza IT & Recruitment

Role Purpose
The Mid-Level Application/Platform Security Engineer is responsible for ensuring the security and integrity of the organizations applications and platforms. This role involves performing security assessments, implementing robust security controls, and supporting the resolution of security incidents. The successful candidate will collaborate closely with development and operations teams to ensure that all systems adhere to security best practices and compliance standards.

Key Responsibilities
Conduct routine security assessments, audits, and vulnerability scans of applications and platforms.
Implement and maintain security controls, including authentication, authorization, encryption, and monitoring tools.
Assist in security incident response and perform root cause analysis to prevent recurrence.
Collaborate with development, DevOps, and infrastructure teams to address identified vulnerabilities and improve security posture.
Support the Senior Engineer in developing and maintaining security policies, procedures, and guidelines.
Stay updated on emerging security threats, technologies, and industry best practices to ensure proactive protection.

Requirements

• NQF Level 6 qualification or a Degree in Information Communication Technology (ICT) or related field (e.g., Information Systems, Computer Science, or Cybersecurity).
  
• Microsoft, Oracle, or AWS Security Certification (or equivalent recognized certification).
  
• Minimum of 4 years experience as a Security Engineer or Platform Engineer, with exposure to application and infrastructure security.
  
• Strong understanding of application and platform security principles (e.g., OWASP, CIS Benchmarks).
  
• Proficiency in security tools and technologies such as SIEM, IDS/IPS, and vulnerability management systems.
  
• Experience with cloud security across AWS, Azure, or Oracle Cloud environments.
  
• Knowledge of authentication and encryption protocols (e.g., SAML, OAuth, TLS, PKI).
  
• Scripting ability for automation (e.g., Python, PowerShell, or Bash).