Application Security Engineer

Job description About Us: Founded in 2018, headquartered in Johannesburg, and backed by leading investors including Pantera Capital, Coinbase Ventures and Fidelity’s F-Prime Capital, VALR is a global crypto exchange offering a comprehensive suite of products—including Spot Trading, Spot Margin, Perpetual Futures, Staking, Lending, Borrowing, OTC services, VALR Invest, Crypto Bundles, and VALR Pay. Licensed by South Africa’s FSCA, with regulatory approval in Europe, VALR serves over 1.7 million registered users and 2,000 corporate and institutional clients worldwide. The exchange is dedicated to advancing a just financial future that upholds human dignity and the unity of mankind. For more information, visit valr.com. Our Vision: To establish VALR as a global institution that advances the economic life of human civilisation through a borderless, inclusive, and empowering financial ecosystem. Our Mission: To contribute towards a global financial system that upholds justice, fosters human dignity, and reflects the oneness of humanity, by serving the financial needs of individuals, communities, and institutions through innovative financial technologies. Job requirements 3+ years of experience in application security or penetration testing, with a strong interest in developing within the field. Hands-on experience performing penetration testing on web and/or mobile applications. Experience working at a penetration testing or security consulting company is advantageous. Solid understanding of common vulnerabilities, including the OWASP Top 10, and how to identify and remediate them. Basic scripting skills (e.g., Python) with an interest in automation and improving security processes. Exposure to security tools such as SAST, DAST, or similar technologies. Strong willingness to learn, grow, and develop within application security. Interest in building scalable security practices, including automation and AI-driven tooling. In addition, the following functional competencies are required: Penetration Testing: Ability to identify and exploit real-world vulnerabilities in web and mobile applications. Secure Code Review: Ability to detect security flaws in code and guide developers on secure coding practices. Threat Modeling: Ability to assess risks in new features, APIs, and system designs. Security Tooling & Automation: Ability to implement and optimise SAST, DAST, and CI/CD-integrated security controls. Vulnerability Management: Ability to prioritise, track, and validate remediation of security issues. Security Advocacy: Ability to enable and support engineering teams in building securely by design. Job responsibilities Perform application penetration testing to identify and validate security vulnerabilities. Work closely with developers to remediate issues and improve secure coding practices. Support the transition from manual security processes to more automated and scalable solutions. Implement and optimise security tooling, including AI-assisted workflows where appropriate. Assist in managing and prioritising vulnerabilities, ensuring timely and effective remediation. Contribute to the ongoing growth and maturity of the application security function. Job benefits Innovative Work Environment Engage with the latest blockchain technologies and tools in a rapidly evolving industry. Work from anywhere with secure, stable internet connectivity, allowing you to create your ideal workspace. Career Development Benefit from an annual professional development allowance alongside scheduled company training sessions to keep you at the forefront of the crypto industry. Competitive Compensation Competitive salaries that align with industry standards. When you contribute to our success, you’ll be rewarded with discretionary bonuses, recognising your impact on VALR’s growth. Receive preferential Tier 5 trading fees on VALR, with no monthly trading volume required. Diversity and Inclusion A commitment to fostering a diverse workforce with initiatives that promote equity and belonging. Wellness Employees are encouraged to strive for coherent and wholesome lives, fulfilling their work, personal, social, physical and spiritual goals to the best of their abilities. Compliance with statutory leave required by individual countries, in addition to flexible leave options. Enjoy lunch on us when working from our Johannesburg Head Office, one of the ways we support wellbeing and connection in the workplace. Impact and Contribution At VALR, we believe in a financial system that recognises the oneness of humanity. Our mission is to break down financial barriers and promote universal values of courage, ethical integrity, and the intrinsic worth of every individual. Engage in initiatives that promote education and awareness about cryptocurrencies, ensuring that everyone has the tools and knowledge to participate in the evolving financial landscape. Dynamic Team Culture Open communication and teamwork across departments, fostering innovation and creativity. Enjoy social gatherings outside of work to strengthen team bonds and boost morale. Global Exposure Work with colleagues from around the world. Exposure to diverse perspectives and practices in the crypto space. Recognition and Rewards Regular acknowledgement of employee accomplishments, fostering a culture of appreciation and motivation. Join us for retreats that blend professional development with team bonding in inspiring locations. Tools for Success Receive a Mac laptop and a discretionary allowance to purchase all the extras needed for a productive home office—yours to keep after three years (terms and conditions apply).