Senior Application Security Engineer - Bykea Technologies

taraki-search; Karachi Division; On-site; PKR 3,000,000 - 4,200,000; Full time

Job summary

Bykea Technologies in Karachi is seeking a Senior Application Security Engineer to lead threat modeling, secure-by-default designs, and secure software delivery across our applications and infrastructure.

You will implement scalable security solutions, perform dynamic and static analyses, and mentor teams to foster a security-first culture while collaborating with cross-functional engineering groups.

Qualifications

• 5+ years of hands-on experience in Application Security.
• Proficiency in scripting languages (Python, JavaScript).
• Experience integrating SAST/DAST within CI/CD environments.
• Experience with AWS, Kubernetes, Terraform/CloudFormation.
• Understanding of TLS/SSL, HTTP(S) and network protocols.

Responsibilities

• Lead threat modeling and secure design reviews for Bykea's applications and infrastructure.
• Design scalable security solutions to detect and remediate vulnerabilities.
• Drive shift-left security by integrating SAST/DAST and other security tools within CI/CD pipelines.
• Conduct dynamic (DAST) and static (SAST) analysis across microservices and mobile applications.
• Identify, prioritize, and remediate security risks across products, features, and infrastructure.
• Define and enforce best practices for application security across the SDLC.
• Assess and mitigate risks from third-party libraries and dependencies.
• Lead vulnerability triage and remediation efforts with engineering teams.
• Mentor teams and promote a security-first culture across the organization.

Skills

Threat modeling

CI/CD security

SAST/DAST

Python

JavaScript

Cloud security

AWS

Kubernetes

TLS/SSL

Job description

Our client Bykea Technologies is looking for Senior Application Security Engineer in Karachi.

What You Will Do

• Lead threat modeling and secure design reviews for Bykea's applications and infrastructure, ensuring secure-by-default architectures
  
• Design and implement scalable security solutions to proactively detect and remediate vulnerabilities
  
• Drive shift-left security by integrating SAST/DAST and other security tools within CI/CD pipelines
  
• Conduct advanced dynamic (DAST) and static (SAST) analysis across microservices and mobile applications
  
• Identify, prioritize, and remediate security risks across products, features, and infrastructure
  
• Define and enforce best practices for application security across the software development lifecycle (SDLC)
  
• Assess and mitigate risks from third-party libraries and dependencies
  
• Lead vulnerability triage and remediation efforts in collaboration with engineering teams
  
• Act as a security champion, mentoring teams and promoting a strong security-first culture across the organization
  

About You

• 5+ years of hands-on experience in Application Security, with a strong track record of delivering measurable security improvements
  
• Strong proficiency in scripting/development (Python, JavaScript preferred)
  
• Proven experience integrating and managing security tools (SAST, DAST) within CI/CD environments
  
• Solid experience with cloud and infrastructure security (AWS, Kubernetes, Terraform/CloudFormation)
  
• Deep understanding of web security principles, TLS/SSL, authentication mechanisms, and network protocols (HTTP/HTTPS, TCP/IP, etc.)
  
• Experience securing mobile applications, web applications, and microservices-based architectures
  
• Demonstrated ability to secure high-scale, high-availability systems
  
• Familiarity with cloud platforms such as AWS or GCP and their security best practices
  
• Strong collaboration and communication skills, with the ability to influence cross-functional teams
  
• Relevant certifications (e.g., OSCP, AWS Security Specialty) are a plus