Application Security Engineer at 2U

At 2U, we are driven by a singular, powerful mission to eliminate the back row in education. As the parent company of edX, we serve as a global leader in digital learning, powering over 4,000 online programs ranging from free courses to full degrees. By partnering with more than 230 colleges, universities, and corporate leaders, we are actively unlocking human potential on a massive scale. Our team is a diverse collection of innovators and dreamers who believe that education should be accessible to everyone, regardless of where they are in the world. We are looking for someone who shares this passion to help us protect the platforms that make this transformation possible.

The opportunity

We are seeking a Senior Application Security Engineer to join our global cybersecurity team based in South Africa. In this role, you will act as a vital partner to our software development teams, ensuring that security standards are woven into the fabric of our applications. You will be responsible for identifying vulnerabilities, guiding our engineers through secure coding practices, and maintaining the integrity of our systems as we continue to scale our digital education offerings. This is an on-site position for a professional who thrives on solving complex problems and enjoys working both independently and as part of a collaborative, global group.

A day in the life

• Collaborate directly with development teams to strengthen application security, identifying potential misconfigurations and recommending effective remediation strategies.
• Contribute to the secure software development lifecycle by promoting best practices and conducting thorough assessments that highlight risks to our code and frameworks.
• Stay ahead of the curve by researching emerging threats, attack techniques, and new technologies to ensure our security posture remains robust and proactive.

Who you are

You are a seasoned professional with at least 3 years of experience in web and software development, specifically focused on security. You possess a deep understanding of OWASP principles and are comfortable working with a variety of languages, including PHP, Ruby, Python, Java, HTML, and CSS. You are an effective communicator who can translate complex technical findings into clear, actionable reports for both technical and non-technical stakeholders. You are someone who values continuous learning, maintains high attention to detail, and is comfortable navigating the challenges of both on-premise and cloud network architectures. Proficiency in English is essential for this role, as you will be coordinating with teams across different geographic sites.

Why you'll love it here

We are committed to fostering a culture of belonging and respect where every team member feels empowered to make a difference. We offer a supportive environment that prioritizes your well-being and professional growth. Our benefits package includes:

• Comprehensive life insurance coverage.
• Access to an employee assistance program to support your personal and professional needs.
• A generous paid time off policy, which includes dedicated leave for volunteering, studying, and sports, along with a company-wide break during the festive season.
• Additional perks such as subsidized medical aid, pension fund contributions, and opportunities for professional development through complimentary short courses.