Senior DevSecOps Engineer - Secure SDLC Leader

10Pearls, LLC; Lahore, Karachi Division, Islamabad; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

10Pearls is hiring a Senior Software Security Engineer to embed security into product development and operations. You will work with Digital Product Management and IT Security to ensure robust security controls across the lifecycle using established tooling and processes.

You will lead secure coding practices, automate security testing, and define pragmatic non-functional security requirements. Strong experience in Azure and CI/CD is essential.

Qualifications

• 5+ years in software development and app security.
• Experience with secure design reviews and code-level mitigations.
• Proficient in scripting (PowerShell) and configuration languages (YAML, JSON).
• Hands-on vulnerability management and remediation, incl. pen-test responses.
• Experience with risk assessments, threat modelling, and DevSecOps.
• Knowledge of OWASP, CWE, NIST SSDF and ISO27001 principles.
• Experience with Azure cloud, especially PaaS, and Azure DevOps.
• Familiarity with SOC tools (SIEM, Splunk, Wazuh, Wiz).
• SAST/DAST/SCA tools and API security testing (REST/SOAP).
• Proficient with Burp Suite, Qualys, Metasploit, Nmap, Invicti, etc.

Responsibilities

• Integrate security into the SDLC across software squads.
• Promote DevSecOps mindset and security-first practices.
• Implement and manage security controls, tools, and processes.
• Monitor, detect, and respond to security incidents.
• Automate security testing and CI/CD processes.
• Maintain security documentation and training materials.
• Ensure tools are integrated into development workflows and pipelines.
• Plan and assist in application penetration testing and remediation.
• Serve as subject-matter expert on security patterns and reviews.
• Define and verify non-functional security requirements (NFRs).
• Report on security standards compliance and control effectiveness.
• Align CI/CD and monitoring with Product Management TO-M Model.

Skills

Secure SDLC

PowerShell

YAML

JSON

Vulnerability mgmt

Threat modelling

DevSecOps

Azure cloud

Azure DevOps

SIEM

SOC tools

SAST

DAST

SCA

OWASP

CWE

API security

Pen testing

Burp Suite

Qualys

Metasploit

Nmap

SonarQube

Wireshark

Invicti

Tools

Burp Suite

Qualys

Metasploit

Nmap

SonarQube

Wireshark

Invicti

Azure DevOps

Job description

10Pearls is hiring a Senior Software Security Engineer to embed security into product development and operations. You will work with Digital Product Management and IT Security to ensure robust security controls across the lifecycle using established tooling and processes.

You will lead secure coding practices, automate security testing, and define pragmatic non-functional security requirements. Strong experience in Azure and CI/CD is essential.