20 days ago
Karachi, Pakistan +2 moreSenior
Responsibilities
- Integrate security requirements and practices into software development lifecycles and digital products.
- Implement and manage application and infrastructure security controls, tools, and processes.
- Monitor and respond to security incidents and threats.
- Automate shift-left security testing and secure deployment processes.
- Integrate application security tools into development processes and CI/CD pipelines.
- Plan and execute application penetration tests and support remediation of findings.
- Advise engineering squads on application security patterns, secure design reviews, and code-level mitigations.
- Define and verify pragmatic security non-functional requirements with product teams.
- Maintain security documentation and training materials.
- Contribute to reporting on security compliance and control effectiveness.
Requirements
- 5+ years of experience in software development and application security, including secure design review and code-level mitigation.
- Proficiency with PowerShell, YAML, and JSON.
- Hands-on experience with vulnerability management, remediation, penetration-test findings, and security assessments.
- Experience conducting risk assessments and threat modeling for software systems.
- Knowledge of secure development principles and standards including NCSC Secure Development & Deployment Guidance, OWASP, NIST SSDF 800-218, Microsoft Azure secure development best practices, and ISO 27001.
- Experience with Azure cloud infrastructure, particularly Azure PaaS services, and familiarity with Azure DevOps for CI/CD and backlog management.
- Experience with SOC tools including SIEM, Splunk, Wazuh, and Wiz.
- Hands-on experience with SAST, DAST, and SCA tools.
- Experience identifying vulnerabilities related to the OWASP Top 10 and CWE Top 25.
- Experience performing API security testing for REST and SOAP APIs.
- Familiarity with Burp Suite, Qualys, Metasploit, Nmap, Maltego, SonarQube, Wireshark, and Invicti.
- Strong analytical, problem-solving, communication, and interpersonal skills.
