Senior Application Security Specialist
Core
Leads the Application Security team to build security into software across the secure development lifecycle, code scanning, application testing, third-party apps, identity/access, and AI features.
Role type
Senior Application Security Lead (hands-on IC with team management)
Builds
Secure software products and services for Old Mutual's business
Domain
Financial services / Insurance / Cybersecurity
Required skills
Application security (SAST, SCA, DAST, secrets scanning), CI/CD pipeline integration, Threat modelling, Penetration testing coordination, Identity and access management (SSO, MFA, OAuth, OIDC, SAML, WAF), AI security (prompt injection, data leakage), Risk assessment and remediation SLA management, Team leadership and technical coaching
Preferred skills
OSCP, CISSP, Financial services/insurance experience, POPIA regulatory knowledge, Cloud application security (Azure, AWS), Container and pipeline security
Technologies
SAST, SCA, DAST, CI/CD pipelines, Azure, AWS, OAuth 2.0, OIDC, SAML, WAF, AI APIs
Responsibilities
Set application security standards and sign off security before release; Read scan output, scope tests, and challenge findings; Manage Application Security Analysts including workload allocation and performance reviews; Partner with development leads to plan security into sprints; Manage external penetration testing providers; Report application risk to management
Seniority
Senior, hands-on IC with team management
