App Security & Pen Testing Specialist

PMCL-JAZZ; Islamabad; On-site; PKR 900,000 - 1,500,000; Full time

Job summary

JazzWorld is seeking a Specialist for Application Security & Pen Testing to design and maintain a robust security framework across Jazz digital platforms, including APIs, portals, and mobile apps.

You will identify security gaps, conduct testing before deployment, and verify ongoing protection of data against internal and external threats, coordinating with stakeholders and the Stream Head Cyber Security.

Qualifications

• Practical experience of application security in banking / Telco sector.
• At least 01 years of experience in security design and penetration testing of mobile applications & APIs.
• Ability to organize, plan and document tasks; manage internal & external stakeholders.

Responsibilities

• Design, develop and maintain a robust application security framework for Jazz digital footprint
• Identify loopholes in the custom developed/security systems of built servers, web portals/dashboards, user applications of Jazz.
• Perform security testing of all Jazz services before going live.
• Perform periodic security verifications of Jazz services
• Ensures the security/data protection for applications vulnerable to internal/external attackers.
• Detects bugs/errors embedded in the source code of android/iOS/other language based apps.
• Analyse the communication path/matrix of applications to track host servers and IP addresses accordingly.
• Performs relevant preventive measures to protect leakage of confidential/sensitive information.
• Coordinate and manage internal stakeholder expectations with the right balance of security controls.

Skills

Information security

Application security

Penetration testing

Education

BS/MS in information security/Information Technology

Tools

OWASP

Penetration testing tools

Job description

JazzWorld is seeking a Specialist for Application Security & Pen Testing to design and maintain a robust security framework across Jazz digital platforms, including APIs, portals, and mobile apps.

You will identify security gaps, conduct testing before deployment, and verify ongoing protection of data against internal and external threats, coordinating with stakeholders and the Stream Head Cyber Security.