Senior Software Security Engineer DevSecOps for Secure SDLC

10Pearls; Lahore; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

10Pearls in Lahore is seeking a Senior Software Security Engineer to embed security into the SDLC and collaborate with Digital Product Management and IT Security. You will implement controls, automate security testing, and support remediation across the product lifecycle.

The role requires 5+ years in software development and application security, strong scripting (PowerShell, YAML, JSON), and hands-on experience with vulnerability management, SAST/DAST/SCA tools, and Azure cloud services.

Qualifications

• 5+ years of experience in software development and application security, including secure design review and code-level mitigation.
• Proficiency in scripting and configuration languages such as PowerShell, YAML and JSON.
• Hands-on experience with vulnerability management and remediation, including responses to pen test findings and security assessments.

Responsibilities

• Collaborate with software development teams to integrate security into the SDLC, ensuring products are built securely.
• Champion a DevSecOps mindset across squads to ensure a security-first approach while minimising impact to user experience.
• Implement and manage security controls, tools and processes to secure applications and infrastructure.
• Monitor and respond to security incidents and threats in a timely manner.
• Assist with planning and execution of application penetration tests; track and support remediation.

Skills

Software development

Application security

DevSecOps

Security testing

Vulnerability management

Azure cloud

PowerShell

YAML

JSON

Threat modelling

Tools

Azure DevOps

Burp Suite

Qualys

Metasploit

Nmap

Wazuh

Job description

10Pearls in Lahore is seeking a Senior Software Security Engineer to embed security into the SDLC and collaborate with Digital Product Management and IT Security. You will implement controls, automate security testing, and support remediation across the product lifecycle.

The role requires 5+ years in software development and application security, strong scripting (PowerShell, YAML, JSON), and hands-on experience with vulnerability management, SAST/DAST/SCA tools, and Azure cloud services.