Application Security Analyst: FinTech & PCI-DSS

Hydrogen; Gajar; On-site; PKR 16,644,000 - 24,965,000; Full time

Job summary

Hydrogen is seeking an experienced Application Security Analyst to protect critical payment platforms, including card management and switch architectures. You will lead SAST, DAST, SCA, and manual reviews, embed security gates in CI/CD, and drive PCI-DSS compliance across high-velocity engineering teams.

The role requires 3–5 years in application security, strong penetration testing skills, and a solid PCI-DSS background to translate risk into actionable business context.

Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related technical discipline.
• Between 3 to 5 years of relevant professional experience in application security, penetration testing, or software security engineering.
• Prior hands-on exposure to fintech, digital banking, payment card processing, or financial payment switch environments.
• CompTIA Security+ certification (required or actively in progress).
• Solid technical proficiency in executing SAST, DAST, and SCA tooling within automated CI/CD software delivery pipelines.
• Demonstrated expertise in web, API, and mobile application penetration testing methodologies and secure code review practices.
• Comprehensive working knowledge of the PCI-DSS compliance framework, control requirements, and formal audit evidence validation.
• Strong analytical, cross-functional collaboration, and communication skills, with a proven ability to translate technical security risk into business context.

Responsibilities

• Conduct comprehensive SAST, DAST, SCA, and manual secure source code reviews across card management, payment switch, and POS/ATM integration systems.
• Perform vulnerability assessments and hands-on penetration testing across enterprise web applications, mobile apps, and payment API endpoints.
• Design, configure, and embed automated security gates and policy checkpoints throughout the software development lifecycle (SDLC) and CI/CD pipelines.
• Support continuous PCI-DSS compliance operations through control validation, audit evidence collection, and structured remediation tracking.
• Evaluate third-party partner and vendor integrations for cybersecurity risk, focusing specifically on ISO 8583 messaging interfaces and payment networks.
• Monitor application-layer security telemetry and partner with SOC analysts to investigate anomalous transaction flows and potential fraudulent activities.
• Participate actively in incident response operations and technical containment procedures for application-level security incidents.
• Draft comprehensive risk assessment reports, document security vulnerabilities, and partner directly with engineering squads to verify permanent defect closure.

Skills

SAST tooling

DAST tooling

SCA tooling

PCI-DSS knowledge

Penetration testing

Secure code reviews

CI/CD security gates

Vulnerability assessments

Education

Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related technical discipline

Tools

CI/CD tooling

ISO 8583 knowledge

Job description

Hydrogen is seeking an experienced Application Security Analyst to protect critical payment platforms, including card management and switch architectures. You will lead SAST, DAST, SCA, and manual reviews, embed security gates in CI/CD, and drive PCI-DSS compliance across high-velocity engineering teams.

The role requires 3–5 years in application security, strong penetration testing skills, and a solid PCI-DSS background to translate risk into actionable business context.