Senior DevSecOps Engineer: Secure Software Delivery

10Pearls, LLC; Lahore, Karachi Division, Islamabad; On-site; PKR 1,200,000 - 1,600,000; Full time

Job summary

10Pearls is hiring a Senior Software Security Engineer to embed security requirements and best practices into new Digital Products and Services, under the guidance of the Lead Software Security Engineer. You will collaborate with Digital Product Management and IT Security to ensure robust security controls across the product lifecycle.

The role emphasizes SDLC security integration, DevSecOps adoption, and close work with engineering teams to enable secure delivery of digital products.

Qualifications

• 5+ years of software development and application security experience.
• Proficiency in scripting/config languages: PowerShell, YAML, JSON.

Responsibilities

• Collaborate with software development teams to integrate security into the SDLC, ensuring products are built securely.
• Champion a DevSecOps mindset across squads assign to work closely with the various roles within these squads to ensure a security‑first approach is taken while minimising impact to the end users experience.
• Implement and manage security controls, tools and processes to secure applications and infrastructure.
• Monitor and respond to security incidents and threats in a timely manner.
• Work with the Lead Security Engineer to continually automate and shit left security testing and deployment processes to enable rapid, secure software delivery.
• Update and maintain concise security documentation and training materials for engineering teams.
• Work with the lead Security Engineer to ensure the selected application security tools are in grated within existing development processes and CI/CD pipelines.
• Assist with the planning and execution of application penetration tests; track and support remediation.
• Act as a subject‑matter expert to squads on application security patterns and reviews.
• Define pragmatic security non‑functional requirements (NFRs) with product teams and verify they’re met.
• Contribute to reporting on compliance with security standards and control effectiveness.
• CI/CD and monitoring requirements as described in the Digital Product Management Target Operating Model.

Skills

Software development

Application security

DevSecOps

Security testing

Threat modelling

CI/CD

Azure

PowerShell

OWASP

SAST/DAST

Tools

SIEM

Splunk

Wazuh

Wiz

Burp Suite

Qualys

Metasploit

Nmap

Maltego

Sonarqube

Wireshark

Invicti

Azure DevOps

Job description

10Pearls is hiring a Senior Software Security Engineer to embed security requirements and best practices into new Digital Products and Services, under the guidance of the Lead Software Security Engineer. You will collaborate with Digital Product Management and IT Security to ensure robust security controls across the product lifecycle.

The role emphasizes SDLC security integration, DevSecOps adoption, and close work with engineering teams to enable secure delivery of digital products.