Specialist Application Security Job Vacancy at CRDB Bank PLC – November 2026

Organization: CRDB Bank PLC – Benki ya CRDB

Location: Tanzania Head Office

Category: Administration / Cybersecurity

Job Type: Full-Time

Application Deadline: 22 November 2026

CRDB Bank PLC is inviting applications from qualified candidates for the position of Specialist Application Security at its Tanzania Head Office.

Job Purpose

The Specialist Application Security is a key member of the Security Architecture team and reports to the Enterprise Security Architect. The role is responsible for integrating security into Agile development squads and the Software Development Lifecycle (SDLC), designing cybersecurity controls for CRDB products, services and systems, and providing assurance through security assessments and threat modelling. The successful candidate will promote secure coding practices across software development initiatives, embed secure SDLC practices within product squads, maintain secure coding guidelines and coordinate CI/CD security activities involving Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA). The specialist will also serve as the primary security subject matter expert (SME), supporting developers in delivering secure software features efficiently.

Key Responsibilities

• Work closely with Agile development squads to embed security into all stages of the Software Development Lifecycle (SDLC) and promote secure-by-design principles in systems and applications.
• Participate in application security testing, including threat modelling, vulnerability assessments and penetration testing of web and mobile applications.
• Promote the adoption of secure coding practices and security best practices across development teams.
• Conduct risk assessments and recommend appropriate security controls to mitigate identified risks.
• Participate in developing and maintaining security standards, guidelines and tools that support secure Agile development.
• Review source code for security vulnerabilities and provide actionable recommendations to improve application security.
• Work with Security Champions within development squads to strengthen security posture and promote a security-first development culture.
• Assist in developing secure DevOps pipelines and implementing security controls within CI/CD pipelines.
• Collaborate with Security Champions and Software Developers to conduct automated static (SAST) and dynamic (DAST) security testing across development and production environments through CI/CD pipelines.
• Enforce security policies throughout the development and deployment stages of the CI/CD pipeline.
• Participate in providing training and mentorship on secure development practices to developers and DevOps teams.
• Contribute to incident response and investigations involving application security issues.
• Assist in evaluating third-party applications and integrations for security risks.
• Perform other responsibilities as assigned by the Bank’s Management.

Qualifications and Experience

Applicants must meet the following requirements:

• Bachelor’s degree in Computer Science, Cyber Security, Software Engineering or a related academic field.
• Minimum of 2 years’ experience in the Cyber Security and Software Development industry.
• Strong foundation in the required skills and knowledge acquired through projects, programmes and relevant work experience.

Professional Certifications

Possession of any of the following certifications will be an added advantage:

• Certified Information Systems Security Professional (CISSP).
• Offensive Security Certified Professional (OSCP).
• Certified Secure Software Lifecycle Professional (CSSLP).

Knowledge and Technical Skills

Candidates should demonstrate:

• Solid understanding of cybersecurity principles, application security and secure coding standards, including OWASP Top 10.
• Familiarity with security frameworks and standards such as NIST and ISO 27001.
• Exposure to application security testing tools.
• Basic knowledge of DevSecOps and CI/CD pipeline security.
• Basic understanding of cloud platforms.
• Understanding of ICT infrastructure, networks and application development.

Equal Employment Opportunity

CRDB Bank is committed to upholding sustainability and Environmental, Social and Governance (ESG) practices. The Bank promotes an inclusive workplace and encourages applications from women and persons with disabilities.

Important Notice:

CRDB Bank does not charge any fees for the application or recruitment process. Applicants should disregard any requests for payment, as these do not represent the Bank’s recruitment practices. Only shortlisted candidates will be contacted.

How to Apply

Interested candidates should submit their applications online through the official CRDB Bank PLC careers portal.

Application Deadline: 22 November 2026

CLICK HERE TO APPLY