Application Security Engineer - Secure SDLC & OWASP

Pintern; Pakistan; On-site; PKR 2,400,000 - 4,000,000; Part time

Job summary

Public Procurement Regulatory Authority (PPRA) seeks an experienced Application Security Engineer under a lump-sum contract basis to protect tender documents and critical procurement data. The role requires hands-on security testing, secure configurations, and coordination with DevOps to enforce secure SDLC practices.

The ideal candidate has 5+ years in application or information security, with CEH and CISA certs, and familiarity with regulatory compliance.

Qualifications

• Bachelor’s degree (16 years) in CS/SE/IT/Cybersecurity or related field from an HEC-recognized university.
• Mandatory CEH certification.
• Mandatory CISA certification.
• Minimum 5 years of post-qualification experience in Application Security, Info Security or SOC operations.

Responsibilities

• Monitor and analyze application logs, database activities, APIs, and user behavior using SIEM and security tools.
• Detect, analyze, and respond to cybersecurity incidents related to applications, including data breaches and misuse of sensitive information.
• Implement and maintain application security controls: RBAC, API security, encryption, secure SDLC alignment.
• Conduct vulnerability assessments and secure code reviews; coordinate remediation of weaknesses per OWASP Top 10.

Education

Bachelor’s degree (16 years) in Computer Science / Software Engineering / Information Technology / Cybersecurity

CEH (Certified Ethical Hacker)

CISA (Certified Information Systems Auditor)

Tools

SIEM platforms

Vulnerability assessment tools

SAST/DAST

OWASP Top 10

Job description

Public Procurement Regulatory Authority (PPRA) seeks an experienced Application Security Engineer under a lump-sum contract basis to protect tender documents and critical procurement data. The role requires hands-on security testing, secure configurations, and coordination with DevOps to enforce secure SDLC practices.

The ideal candidate has 5+ years in application or information security, with CEH and CISA certs, and familiarity with regulatory compliance.