Senior Application Security Engineer

Backbase; Hyderabad City Taluka; On-site; PKR 250,000 - 450,000; Full time

Job summary

Backbase in Hyderabad, Pakistan invites a Senior Application Security Engineer to join our global security team. You’ll help build, maintain and deploy secure software used by millions, combining hacker mindset with strong security practices across web and mobile apps.

You’ll own secure SDLC processes, triage vulnerabilities, and work with developers to embed security in design and code. English proficiency and hands-on security expertise are essential for this role.

Qualifications

• Good understanding of application security and OWASP risks.
• Expert in at least one domain: frontend, backend or mobile security.
• Solid DevOps and cloud-native technologies knowledge.
• Track record in identifying, triaging and resolving issues.
• Background in development and SDLC understanding.
• Professional English, written and spoken.

Responsibilities

• Develop, maintain and deploy secure software.
• Identify, triage and resolve security issues.
• Collaborate with development teams on security best practices.
• Guide developers on application security concepts.
• Implement security controls across SDLC and cloud environments.

Skills

Application security

Frontend security

Backend security

Mobile security

DevOps

Cloud-native

Threat modeling

Pen testing

SDLC knowledge

English proficiency

Job description

The job in short

No day at Backbase is the same, and even more so for our security engineers. We all know that security and banking need to go hand in hand and with hackers and tech evolving by the day, you’ll need to stay on your toes and ahead of the game.

Meet the job

Looking for a journey instead of a job? Then let’s talk! We are THE pioneers in banking tech. We see opportunities and take the leap. Having the guts to push limits and break barriers to make things happen. We learn and reinvent ourselves for maximum impact, never giving up. We are creators, with a customer-centric mindset that love what they do and bring fun to any challenge. Together we kick ass, have fun and feel proud when our vision is delivered. Next day - we wake up and raise the bar a little higher. Are you ready?

As a Senior Application Security Engineer you’ll be part of the team of security engineers working to ensure we build, maintain and deploy secure software that is used by millions of users around the globe. If you have a hacker mindset, are passionate about security and always looking to extend your knowledge, then this is the place for you.

How about you

In order to really own this role, we think you’ll need:

• Good understanding of application security and common application security vulnerabilities;
• Good understanding of frontend, backend and mobile security domains and you’re an expert in one of them;
• Good understanding of DevOps and cloud native technologies;
• Successful track record in identifying, triaging and resolving application security issues;
• A background in development and a good understanding of the SDLC;
• English language on a professional level, written and spoken.

We’ll be delighted if you bring experience in the following topics but otherwise these would be opportunities for you to grow your knowledge working in the security team:

• Implementing OWASP ASVS/M-ASVS and SKF;
• Implementing SAST, SCA, IAST and RASP tools in the SDLC;
• Facilitating threat modeling sessions with the development teams;
• Pen testing web and mobile applications;
• Training and guiding developers on application security concepts;
• Relevant regulations such as GDPR and PCI-DSS.