Senior Application Security Engineer - Secure Apps & Data

Pakistan; Islamabad; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

Public Procurement Regulatory Authority (PPRA) in Pakistan seeks an experienced Application Security Specialist to lead security across procurement platforms. You will monitor logs, assess risks, and coordinate incident response to protect sensitive tender data and financial information.

The role requires CEH and CISA certifications, a minimum of 5 years in application security or SOC, and hands-on use of SIEM, vulnerability tools, and secure SDLC practices within a public sector or enterprise

Qualifications

• Bachelor’s degree required in CS/SE/IT/Cybersecurity or related discipline.
• CEH and CISA certifications mandatory.
• At least 5 years of post-qualification experience in application security or SOC.
• Experience securing web apps, APIs, databases, and enterprise systems with logs monitoring.

Responsibilities

• Monitor and analyze application logs, databases, APIs, and user behavior using SIEM to detect anomalies.
• Detect, analyze, and respond to cybersecurity incidents affecting applications, including data breaches.
• Implement application security controls: RBAC, API security, encryption, and secure SDLC.
• Conduct vulnerability assessments, secure code reviews, and coordinate remediation per OWASP Top 10.
• Ensure secure system integrations with external entities including banks and other systems.

Skills

Application Security

Information Security

SOC operations

Vulnerability Assessment

Education

Bachelor’s degree in Computer Science / Software Engineering / IT / Cybersecurity

Tools

SIEM platforms

Vulnerability assessment tools

OWASP Top 10

Job description

Public Procurement Regulatory Authority (PPRA) in Pakistan seeks an experienced Application Security Specialist to lead security across procurement platforms. You will monitor logs, assess risks, and coordinate incident response to protect sensitive tender data and financial information.

The role requires CEH and CISA certifications, a minimum of 5 years in application security or SOC, and hands-on use of SIEM, vulnerability tools, and secure SDLC practices within a public sector or enterprise