Afternoon-Shift Senior Software Security Engineer (DevSecOps)

10Pearls; Islamabad; On-site; PKR 1,800,000 - 2,400,000; Full time

Job summary

10Pearls in Islamabad is seeking a Senior Software Security Engineer to embed security into product development and IT security interfaces, guiding secure delivery across the lifecycle. You will work with cross‑functional teams to ensure security controls are in place and security testing is automated.

The role requires 5+ years in software development and application security, hands‑on with SAST/DAST/SCA, and experience with Azure DevOps, CI/CD, and SOC tools.

Qualifications

• 5+ years in software development and application security
• Proficiency in PowerShell, YAML and JSON
• Hands-on with vulnerability management, pen test findings & remediations
• Experience with risk assessments and threat modelling for software systems
• Familiarity with Azure cloud, Azure DevOps, and CI/CD pipelines
• Knowledge of OWASP Top 10, CWE Top 25 and secure development practices

Responsibilities

• Collaborate with software teams to integrate security into the SDLC
• Champion a DevSecOps mindset across squads and minimize user impact
• Implement and manage security controls, tools, and processes
• Monitor and respond to security incidents and threats promptly
• Automate security testing and integrate tools into CI/CD pipelines
• Maintain security documentation and training materials for engineering teams
• Support application penetration testing and remediation tracking
• Act as SME on application security patterns and reviews

Skills

Security engineering

DevSecOps

Azure DevOps

SAST/DAST/SCA

Threat modelling

Scripting (PowerShell)

OWASP

Tools

Burp Suite

Nmap

Wazuh

Splunk

SIEM

SonarQube

Job description

10Pearls in Islamabad is seeking a Senior Software Security Engineer to embed security into product development and IT security interfaces, guiding secure delivery across the lifecycle. You will work with cross‑functional teams to ensure security controls are in place and security testing is automated.

The role requires 5+ years in software development and application security, hands‑on with SAST/DAST/SCA, and experience with Azure DevOps, CI/CD, and SOC tools.