AppSec Leader: Vulnerability & Risk Management

easypaisa digital bank; Islamabad; Vor Ort; PKR 2.000.000 - 3.200.000; Vollzeit

Zusammenfassung

easypaisa digital bank in Pakistan is seeking an experienced Information Security professional to oversee the secure deployment of servers, applications, containers and databases, guiding the team to address security gaps and support production readiness.

You will assist the Head of Information Security/CISO in managing the Information Security Risk Register for Application Security, review third-party integrations, and prepare MIS reports for stakeholders, highlighting risks and mitigations.

Qualifikationen

• Bachelor's degree in CS/IS/Engineering from a reputable institute.
• +5 years hands-on experience in server, application vulnerability scanning and penetration testing.
• Certifications relevant to the position preferred.
• 2-3 years hands-on experience in application security, server vulnerability scanning and penetration testing.
• Understanding of MITRE ATT&CK, OWASP, OSTMM; added advantage.

Aufgaben

• Oversee the secure deployment of servers, applications, containers and databases.
• Guide the team in addressing security gaps and manage the Information Security Risk Register.
• Conduct vulnerability assessments and penetration testing for desktop, web, mobile apps, APIs and servers.
• Review BRD/PRD and third‑party integrations for security requirements.
• Provide security education to developers and admins on requirements and resolutions.
• Develop metrics for secure development and data loss prevention.
• Participate in information security risk assessments and audits.
• Prepare reports for stakeholders highlighting risks and mitigations.

Kenntnisse

Vulnerability scanning

Penetration testing

Static/Dynamic analysis

Cloud security

Security governance

MITRE ATT&CK

OWASP

SmartSheet

Ausbildung

Bachelor’s in CS/IS/Engineering

Tools

SmartSheet

Jobbeschreibung

easypaisa digital bank in Pakistan is seeking an experienced Information Security professional to oversee the secure deployment of servers, applications, containers and databases, guiding the team to address security gaps and support production readiness.

You will assist the Head of Information Security/CISO in managing the Information Security Risk Register for Application Security, review third-party integrations, and prepare MIS reports for stakeholders, highlighting risks and mitigations.