Application Security Engineer

CACI International — Block 2D, Altron Campus, 20 Woodlands Dr, Woodmead, Johannesburg, 2191, South Africa

Apply on employer website
Job Title: Application Security EngineerJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local* * *The Opportunity:Join a mission‑driven cybersecurity team securing applications that support a critical DoD mission. In this role, you’ll embed security directly into the software development lifecycle, partner with developers and architects, and use industry‑leading tools to identify, validate, and remediate vulnerabilities across a diverse application ecosystem.You will:Embed robust security practices into the secure SDLC from design through deploymentExecute both static SAST and dynamic DAST application security testing using enterprise toolingLead and support penetration testing engagements, guiding developers through actionable remediationWork within a fully staffed cybersecurity program—including architecture, GRC, and operations expertsGrow your expertise across the AppSec spectrum: code review, runtime testing, and compliance validationResponsibilities:Perform SAST using Fortify across assigned applicationsConduct continuous code quality and security analysis using SonarQubeExecute DAST to identify runtime vulnerabilitiesCoordinate and execute penetration testing engagementsConduct secure code reviews and document findings with actionable guidanceTrack and verify vulnerability remediation through closureValidate application security controls against program and DoD requirementsAuthor application security assessment and penetration test reportsSupport the Cybersecurity Architect with secure SDLC process designQualifications:Required: Active Secret or TS clearance3–5 years of experience in application security, secure development, or penetration testingHands‑on experience with SAST platforms Fortify preferredWorking knowledge of OWASP Top 10 and common application vulnerability classesDemonstrated experience conducting




Looking for a job?

Visit Careersaas to find millions of new and unfilled roles, including thousands of remote and hybrid positions.