Application Security Specialist

• PositionApplication Security Specialist
• CompanyHousing Finance Bank Limited
• LocationKampala, Uganda
• Job TypeNot stated in the advert.
• CategoryBanking, ICT/Information Technology Jobs in Uganda
• IndustryBanking and Financial Services
• DepartmentInformation Security
• DeadlineMonday, 16 November 2026, 5:00 PM

Housing Finance Bank Limited is a Ugandan commercial bank offering personal and business banking services. Its product range includes accounts, loans, home finance, trade finance and digital banking channels.

The bank states its mission is to provide efficient, innovative and customer-centred financial services, and its vision is to be a preferred business and consumer bank with a distinct focus on housing finance.

The Application Security Specialist safeguards internally developed and third-party applications by embedding security throughout the software development lifecycle. The work combines application security assessments, code reviews, static and dynamic analysis, software composition analysis and vulnerability scanning with follow-up to identify, prioritise and remediate issues. The post also reviews application, web-server, database and middleware configurations and logs, develops security baselines, considers privileged access and participates in threat-modelling and design reviews. Security incidents involving applications require investigation, root-cause analysis and support for response and mitigation.

The role sits in Information Security and works with developers, infrastructure teams, risk colleagues, business technology staff and external IT or cybersecurity service providers. It also tracks testing and remediation metrics, documents security posture and procedures, supports regulatory compliance, and shares guidance with technical and non-technical audiences. The employer highlights secure development practices, application reliability and protecting sensitive information as central to the position. It requires a relevant bachelor’s degree and 2–5 years in application security, secure software development or cybersecurity.

• Conduct security assessments of internally developed and third-party applications, including code reviews, static and dynamic analysis, and vulnerability scanning.
• Identify, analyse and report application vulnerabilities, and work with development and infrastructure teams to ensure timely remediation.
• Review configurations and logs of application servers, web servers, databases and middleware for compliance with security policies and standards.
• Oversee the implementation, management and fine-tuning of application security tools, including SAST, DAST, SCA and vulnerability scanners.
• Collaborate with developers to integrate security into the software development lifecycle and provide guidance on secure coding practices.
• Develop and maintain security baselines and hardening guidelines for applications and related systems.
• Participate in threat-modelling exercises and design reviews for new applications or significant changes to existing systems.
• Review privileged-access activity on application systems and ensure appropriate user access controls and segregation of duties.
• Investigate application-related security incidents, conduct root-cause analysis and contribute to incident-response efforts.
• Document application-security procedures, standards and reports in alignment with regulatory requirements and internal policies.
• Support compliance by ensuring application environments meet PCI DSS, GDPR and local banking regulations.
• Track and report metrics related to application vulnerabilities, remediation efforts and security-testing outcomes.
• Participate in training and knowledge sharing to promote secure development practices across the bank’s technology teams.
• Stay updated on emerging threats, vulnerabilities and security technologies relevant to applications.

Required Education

• Bachelor’s degree in computer science, information technology, software engineering or a related field.

Work Experience

• At least 2–5 years of experience in application security, secure software development or cybersecurity roles.

Additional Requirements

• Practical experience with SAST, DAST, SCA and vulnerability-scanning solutions.
• Familiarity with secure-coding principles, OWASP Top 10 and threat-modelling methodologies.
• Knowledge of application attack vectors including injection flaws, authentication bypass and sensitive-data exposure.
• Professional certifications listed include Offensive Security Certified Professional (OSCP), Certified Cloud Security Practitioner, Microsoft Security Operations Analyst, Microsoft Security Compliance and Identity, GIAC Web Application Penetration Tester, CSSLP, Certified Forensics Examiner and Certified Threat Hunter.

Technical Skills

• Application security testing: Practical use of SAST, DAST, SCA and vulnerability-scanning solutions; code review and static and dynamic analysis.
• Secure development: Familiarity with secure-coding principles, OWASP Top 10 and threat-modelling methodologies.
• Application risk and compliance: Knowledge of application attack vectors, configuration and log review, and financial-sector regulatory requirements.

Soft Skills

• Analytical problem-solving: Strong analytical and problem-solving skills are stated in the person specification.
• Communication: Ability to communicate security requirements clearly and produce reports for technical and non-technical audiences.
• Collaboration: A collaborative approach and ability to work with development teams and multiple bank teams are specified.
• Integrity and confidentiality: A high level of integrity and confidentiality is required.
• Organisation and learning: Strong organisation and time management, independent working and continuous learning are stated behaviours.

Benefits are not stated in the advert.

• Work across both internally developed and third-party banking applications.
• Combine code reviews, SAST, DAST, SCA and vulnerability scanning in application assessments.
• Partner with development and infrastructure teams to follow security issues through remediation.
• Contribute security requirements and secure-coding guidance throughout the software development lifecycle.
• Participate in threat modelling, application design reviews and incident investigations.
• Help track the bank’s application-security posture through testing and remediation metrics.
• Promote secure development practices through training and knowledge sharing.

Submit your application only through the Microsoft Form. Send the application letter, CV, academic documents and certificates in one scanned batch, together with daytime telephone contact, postal and email address, and three competent referees. The combined document size must not exceed 10 MB; hand delivery is not accepted. Apply by Monday, 16 November 2026 at 5:00 PM.

• Checked on 10 November 2026 against Housing Finance Bank Limited's official advert.
• Closing date confirmed as 16 November 2026. NextRoleHub closes the listing at 23:59 Kampala time that day.
• The application link goes to the employer's own page or email. Applying is free; report anyone who asks for money.
• Before you apply, read our guide: Bank jobs in Uganda: salaries and how to get hired. Work out your pay with the take-home pay calculator.