Senior Software Security Engineer - DevSecOps Leader

10Pearls; Lahore; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

10Pearls in Lahore seeks a Senior Software Security Engineer to integrate security into product development, from design through deployment. You will collaborate with software teams, security engineers and IT to embed secure practices in the SDLC and automate security testing across CI/CD pipelines.

The role requires 5+ years of software development and hands-on security experience, with strong scripting and cloud skills, particularly Azure, and a proven ability to lead security initiatives in

Qualifications

• Strong 5+ years of experience in software development and app security.
• Experience with secure design review and code-level mitigation.
• Proficiency in scripting languages and security tooling.

Responsibilities

• Collaborate with development teams to integrate security into the SDLC.
• Champion a DevSecOps mindset across squads for security-first delivery.
• Implement and manage security controls, tools and processes.
• Monitor and respond to security incidents and threats.
• Automate security testing and deployment within CI/CD pipelines.
• Maintain security documentation and training materials.
• Ensure selected security tools integrate with development processes.
• Assist planning and execution of application penetration tests and remediation.
• Act as SME on application security patterns and reviews.
• Define pragmatic security non-functional requirements with product teams.
• Contribute to reporting on security standards compliance.
• Address CI/CD and monitoring requirements per TPM.

Skills

Software security

DevSecOps

Threat modelling

Risk assessment

Agile

Scripting

Communication

Problem solving

Tools

Azure DevOps

Azure

SIEM

Splunk

Wazuh

Wiz

SAST

DAST

SCA tools

Burp Suite

Qualys

Metasploit

Nmap

Maltego

SonarQube

Wireshark

Invicti

Job description

10Pearls in Lahore seeks a Senior Software Security Engineer to integrate security into product development, from design through deployment. You will collaborate with software teams, security engineers and IT to embed secure practices in the SDLC and automate security testing across CI/CD pipelines.

The role requires 5+ years of software development and hands-on security experience, with strong scripting and cloud skills, particularly Azure, and a proven ability to lead security initiatives in