Software Engineer - Security Testing

i2c Inc; Lahore; On-site; PKR 5,575,690 - 11,151,380; Full time

Job summary

i2c Inc. in Lahore, Pakistan, is looking for a cybersecurity specialist to conduct thorough security analysis of application logs and perform vulnerability assessments for various platforms. The ideal candidate will execute security testing aligned with OWASP Top 10, analyze infrastructure vulnerabilities, and collaborate with engineering teams to promote secure design practices. Candidates should have strong communication skills for mentoring and providing remediation guidance. A commitment to compliance standards like PCI DSS is essential.

Qualifications

• Strong experience in security analysis and vulnerability assessments.
• Familiarity with OWASP Top 10 and common security threats.
• Ability to provide clear remediation guidance and reports.

Responsibilities

• Perform security analysis of application logs.
• Conduct vulnerability assessments focusing on best practices.
• Execute security testing to identify common threats.

Job description

• Perform security analysis of application logs to detect anomalies and malicious activity.
• Conduct vulnerability assessments for web, mobile, and API platforms, focusing on industry best practices.
• Execute security testing aligned with OWASP Top 10, identifying common threats such as XSS, SQLi, CSRF, etc.
• Analyze and remediate infrastructure-level vulnerabilities in coordination with relevant teams.
• Escalate critical risks and security issues to stakeholders for timely mitigation.
• Curate and assess vulnerability data from multiple tools, validating results and eliminating false positives.
• Provide clear and actionable remediation guidance, both in written reports and verbal communications.
• Evaluate the business impact of identified vulnerabilities and advise on risk prioritization.
• Reproduce and validate vulnerabilities to confirm legitimacy and potential exploitation paths.
• Create detailed security reports highlighting vulnerabilities, risk levels, and recommended fixes.
• Assist in developing and configuring automated tools and scanning solutions to optimize testing workflows.
• Ensure adherence to PCI DSS and other relevant compliance standards during assessments and design reviews.
• Collaborate with development and engineering teams to promote secure design and implementation practices.
• Support team members by resolving technical challenges and sharing expertise.
• Mentor junior team members, fostering knowledge sharing and continuous improvement.
• Participate in defining and improving security testing processes and workflows.
• Conduct ongoing research on emerging vulnerabilities, tools, and security trends to stay ahead in the field.