Public Procurement Regulatory Authority (PPRA) Hiring: Application Security Engineer Public Procurement Regulatory Authority (PPRA)

Pintern; Pakistan; On-site; PKR 2,400,000 - 4,000,000; Part time

Job summary

Public Procurement Regulatory Authority (PPRA) seeks an experienced Application Security Engineer under a lump-sum contract basis to protect tender documents and critical procurement data. The role requires hands-on security testing, secure configurations, and coordination with DevOps to enforce secure SDLC practices.

The ideal candidate has 5+ years in application or information security, with CEH and CISA certs, and familiarity with regulatory compliance.

Qualifications

• Bachelor’s degree (16 years) in CS/SE/IT/Cybersecurity or related field from an HEC-recognized university.
• Mandatory CEH certification.
• Mandatory CISA certification.
• Minimum 5 years of post-qualification experience in Application Security, Info Security or SOC operations.

Responsibilities

• Monitor and analyze application logs, database activities, APIs, and user behavior using SIEM and security tools.
• Detect, analyze, and respond to cybersecurity incidents related to applications, including data breaches and misuse of sensitive information.
• Implement and maintain application security controls: RBAC, API security, encryption, secure SDLC alignment.
• Conduct vulnerability assessments and secure code reviews; coordinate remediation of weaknesses per OWASP Top 10.

Education

Bachelor’s degree (16 years) in Computer Science / Software Engineering / Information Technology / Cybersecurity

CEH (Certified Ethical Hacker)

CISA (Certified Information Systems Auditor)

Tools

SIEM platforms

Vulnerability assessment tools

SAST/DAST

OWASP Top 10

Job description

About the Job

Public Procurement Regulatory Authority (PPRA) has announced 1 vacancy for the post of Application Security Engineer (Lump-sum pay).

Job Details

• Department / Organisation: Public Procurement Regulatory Authority (PPRA)
• Post: Application Security Engineer
• Grade: Lump-sum pay
• Job type: Contract
• Vacancies: 1
• Qualification: Minimum a Bachelor’s degree (16 years of education) in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related discipline from an HEC-recognized university. Mandatory certifications: CEH (Certified Ethical Hacker) CISA (Certified Information Systems Auditor) Experience: Minimum of 5 years of relevant and verifiable post-qualification experience in Application Security, Information Security, or SOC operations. Experience in securing web applications, APIs, databases, and enterprise systems. Hands-on experience with vulnerability assessment tools, SIEM platforms, and application security testing methodologies (SAST/DAST). Familiarity with regulatory compliance, audit processes, and security documentation within public sector or enterprise environments. Job Description: Continuous monitoring and analysis of application logs, database activities, APIs, and user behavior using SIEM and application security tools to identify suspicious or anomalous activities. Detection, analysis, and response to cybersecurity incidents related to applications, including data breaches, unauthorized data access, and misuse of sensitive procurement and financial information. Oversight and implementation of application security controls, including secure configuration, role-based access control (RBAC), API security, encryption, and protection of sensitive data such as tender documents and bid securities. Conducting vulnerability assessments, secure code reviews, and coordinating remediation of application-level and database-related security weaknesses in alignment with OWASP Top 10 standards. Ensuring secure system integrations with external entities including Banks, AGPR, and other organizational systems at application and data layers. Supporting secure software operations by coordinating with development and DevOps teams on security requirements, patches, configuration changes, and secure SDLC implementation. Supporting compliance with applicable laws, rules, regulations, and information security frameworks such as ISO/IEC 27001. Preparation of application and data security incident reports, audit documentation, compliance reports, and periodic security advisories for management. Participation in security audits, assessments, penetration testing activities, and continuous improvement of application and data security controls. Any other responsibility or task assigned by the Project Director for ensuring the seamless security of the EPADS Application.
• Age limit: Up to 40 years
• Location: Pakistan
• Last date to apply: 20 Nov 2026