Application Security Engineer

Pakistan; Islamabad; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

Public Procurement Regulatory Authority (PPRA) in Pakistan seeks an experienced Application Security Specialist to lead security across procurement platforms. You will monitor logs, assess risks, and coordinate incident response to protect sensitive tender data and financial information.

The role requires CEH and CISA certifications, a minimum of 5 years in application security or SOC, and hands-on use of SIEM, vulnerability tools, and secure SDLC practices within a public sector or enterprise

Qualifications

• Bachelor’s degree required in CS/SE/IT/Cybersecurity or related discipline.
• CEH and CISA certifications mandatory.
• At least 5 years of post-qualification experience in application security or SOC.
• Experience securing web apps, APIs, databases, and enterprise systems with logs monitoring.

Responsibilities

• Monitor and analyze application logs, databases, APIs, and user behavior using SIEM to detect anomalies.
• Detect, analyze, and respond to cybersecurity incidents affecting applications, including data breaches.
• Implement application security controls: RBAC, API security, encryption, and secure SDLC.
• Conduct vulnerability assessments, secure code reviews, and coordinate remediation per OWASP Top 10.
• Ensure secure system integrations with external entities including banks and other systems.

Skills

Application Security

Information Security

SOC operations

Vulnerability Assessment

Education

Bachelor’s degree in Computer Science / Software Engineering / IT / Cybersecurity

Tools

SIEM platforms

Vulnerability assessment tools

OWASP Top 10

Job description

Public Procurement Regulatory Authority (PPRA)

Minimum a Bachelor’s degree (16 years of education) in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related discipline from an HEC-recognized university.

Mandatory certifications:

• CEH (Certified Ethical Hacker)
• CISA (Certified Information Systems Auditor)

Experience:

• Minimum of 5 years of relevant and verifiable post-qualification experience in Application Security, Information Security, or SOC operations.
• Experience in securing web applications, APIs, databases, and enterprise systems.
• Hands-on experience with vulnerability assessment tools, SIEM platforms, and application security testing methodologies (SAST/DAST).
• Familiarity with regulatory compliance, audit processes, and security documentation within public sector or enterprise environments.

Job Description:

• Continuous monitoring and analysis of application logs, database activities, APIs, and user behavior using SIEM and application security tools to identify suspicious or anomalous activities.
• Detection, analysis, and response to cybersecurity incidents related to applications, including data breaches, unauthorized data access, and misuse of sensitive procurement and financial information.
• Oversight and implementation of application security controls, including secure configuration, role-based access control (RBAC), API security, encryption, and protection of sensitive data such as tender documents and bid securities.
• Conducting vulnerability assessments, secure code reviews, and coordinating remediation of application-level and database-related security weaknesses in alignment with OWASP Top 10 standards.
• Ensuring secure system integrations with external entities including Banks, AGPR, and other organizational systems at application and data layers.
• Supporting secure software operations by coordinating with development and DevOps teams on security requirements, patches, configuration changes, and secure SDLC implementation.
• Supporting compliance with applicable laws, rules, regulations, and information security frameworks such as ISO/IEC 27001.
• Preparation of application and data security incident reports, audit documentation, compliance reports, and periodic security advisories for management.
• Participation in security audits, assessments, penetration testing activities, and continuous improvement of application and data security controls.
• Any other responsibility or task assigned by the Project Director for ensuring the seamless security of the EPADS Application.

Eligibility Criteria

Qualifications

BS Computer Science (BSCS) BS Software Engineering BS Cybersecurity BS Information Technology (BSIT) BS Bridging Computer Science MSc Computer Science MS Computer Science (MSCS) Master of Computer Science (MCS) BE Computer Science BE Information Technology MS Computer Software Engineering BE Software Engineering MPhil Software Engineering MS Cybersecurity MPhil Computer Science MS Software Engineering Bs Information Technology (Bridging) Msc Cybersecurity and Data governance Master of Engineering (Software Engineering) BSc Software Engineering Master of Computer Science (Executive) EMCS Bachelors of Computer Science BE Computers Systems and Software Engineering Msc in Artificial Intelligence and Computer Science MS Software Engineering and Information System MS Computer Science and Information Technology

Experience

5 Years

Age Limit

Max: 40 years

Quick Overview

Experience: 5+ years

Age Limit: Max: 40

About Employer

Public Procurement Regulatory Authority (PPRA)