Security Engineer (.NET Software Development)
Job Location:
Johannesburg - South Africa
Monthly Salary:
Not provided by the employer
Experience Required:
5years
Posted:
14 October 2026 (3 hours ago)
Application Deadline:
11 January 2027
Vacancies:
1 Vacancy
Job Summary
Job Description
The Security Engineer is responsible for ensuring that software solutions are designed developed tested and deployed in accordance with secure development practices and organisational security standards. Working closely with software engineers architects DevOps teams and client stakeholders the role focuses on identifying security risks implementing security controls and embedding security throughout the software development lifecycle. The Security Engineer combines hands-on application security expertise with secure coding knowledge within the ecosystem.
Responsibilities
- Embed security best practices throughout the software development lifecycle (SDLC).
- Conduct security reviews of application designs architecture and codebases.
- Identify assess and remediate application security vulnerabilities and risks.
- Perform secure code reviews applications and provide remediation guidance to development teams.
- Support the implementation of authentication authorisation encryption and secure communication mechanisms.
- Configure and maintain application security tooling including static and dynamic security testing solutions.
- Collaborate with development teams to address vulnerabilities identified through security assessments and penetration testing.
- Support threat modelling activities and security risk assessments for new and existing solutions.
- Develop and maintain security standards guidelines and secure coding practices.
- Assist with security incident investigation root cause analysis and remediation activities.
- Ensure solutions comply with security privacy governance and regulatory requirements applicable to client environments.
- Contribute to security awareness and secure development knowledge sharing within engineering teams.
Requirements
Technical Skills
- Languages & Frameworks: C# Framework EF Core SQL TypeScript HTML/CSS Python Flask Python
- Application Security: Secure SDLC threat modelling secure code reviews vulnerability management
- DevOps & CI/CD: Azure DevOps Git Docker security scanning tools
- Cloud & Infrastructure: Microsoft Azure Azure App Services Azure Key Vault Azure Storage Virtual Machines
- Testing & QA: SonarQube OWASP ZAP Burp Suite Postman security testing frameworks
- Identity & Access Management: OAuth2 OpenID Connect JWT Microsoft Entra ID
- Security Standards: OWASP Top 10 CWE CVSS secure coding standards
- Monitoring & Logging: Microsoft Sentinel Application Insights Azure Monitor (advantageous)
Knowledge & Attributes
- Strong understanding of application security principles and secure software design.
- Ability to identify security risks and communicate mitigation approaches effectively.
- Strong analytical and problem-solving skills.
- Ability to work collaboratively with development architecture infrastructure and operational teams.
- Attention to detail and commitment to delivering secure high-quality solutions.
- Strong written and verbal communication skills.
- Ability to balance security requirements with business and delivery objectives.
Qualifications
- Bachelors degree in Computer Science Information Security Engineering or a related field (advantageous) or equivalent practical experience.
- Relevant Microsoft Azure security certifications are advantageous.
- Industry-recognised security certifications such as Security SSCP CEH AZ-500 CSSLP or equivalent are advantageous.
Experience
- 5 years of experience in software engineering application security or secure solution delivery.
- Hands-on experience and cloud-based applications.
- .NET vs Python Flask Experience
- Experience using security testing code scanning and vulnerability management tools.
- Experience working with Azure-based environments and DevSecOps practices.
- Understanding of regulatory compliance and governance requirements within enterprise environments.
- Experience supporting remediation activities arising from security assessments and penetration testing exercises.
Required Skills:
.Net Azure DevSecOps C# Testing IAM Owasp