Senior DevSecOps Engineer - PCI, AI Security (AWS)

Contour Software Pvt Ltd; Islamabad; On-site; PKR 900,000 - 1,500,000; Full time

Benefits offered by this job

Market-leading salary

Medical coverage – self & dependents

Provident Fund

Performance-based bonuses

Home internet subsidy

Conveyance allowance

Life benefit

Professional development budget

Job summary

Contour Software Pvt Ltd is seeking a Security Engineer to co‑own our DevSecOps program and harden multi‑tenant AWS/EKS environments. You’ll implement automated security across the SDLC, enforce PCI DSS 4.0 controls, and partner with compliance to translate controls into repeatable evidence.

You will drive penetration testing, incident response readiness, and AI‑assisted security initiatives while balancing speed and risk for a payment‑facilitating platform.

Qualifications

• 8–10 years in application/cloud security or DevSecOps for high‑availability platforms (fintech/payments ideal).
• Hands‑on DevSecOps program administration experience with Veracode.
• Fluent in Terraform for the AWS Stack.
• Strong CI/CD experience (GitHub Actions preferred) and automation in Python/TypeScript/Bash.
• Solid AWS security fundamentals: IAM, KMS, CloudTrail, Config, Security Hub, GuardDuty, VPC/LBs, WAF/Shield; Kubernetes/EKS hardening experience.
• Familiarity with microservices, event‑driven systems, and DDD; ability to read code in TypeScript/Java/Ruby and basic ReactJS patterns.
• Working knowledge of PCI DSS 4.0 control objectives (tokenization/PAN handling, key management, segmentation, logging/retention), plus SOC 2/ISO 27001 concepts.

Responsibilities

• Design, implement, and run the CI/CD security toolchain (SAST, SCA, DAST, container and IaC scanning, secrets detection, SBOM generation, and policy‑as‑code).
• Integrate scanners into GitHub/GitHub Actions pipelines with PR gates, and auto‑ticketing to JIRA; tune noise, baselines, and break‑glass rules.
• Establish vulnerability management SLAs, risk acceptance workflow, and metrics dashboards (e.g., MTTR, vuln burn‑down).
• Embed secure‑coding standards and review checklists for TypeScript/Node, Java, Ruby, React; run threat modeling (STRIDE/PASTA) and produce DFDs for new/high‑risk flows.
• Lead a security champions program with engineering squads.

Skills

DevSecOps

Security automation

Threat modeling

PCI DSS 4.0

SOC 2/ISO 27001

AWS security (EKS)

KMS/CloudHSM

OIDC/OAuth2/JWT

mTLS

Tools

Veracode

GitHub Actions

Terraform

OWASP ZAP

Burp

AWS

ReactJS

Job description

Contour Software Pvt Ltd is seeking a Security Engineer to co‑own our DevSecOps program and harden multi‑tenant AWS/EKS environments. You’ll implement automated security across the SDLC, enforce PCI DSS 4.0 controls, and partner with compliance to translate controls into repeatable evidence.

You will drive penetration testing, incident response readiness, and AI‑assisted security initiatives while balancing speed and risk for a payment‑facilitating platform.