Specialist Application Security & Pen Testing

JazzWorld; Islamabad; On-site; PKR 1,339,000 - 2,232,000; Full time

Benefits offered by this job

Equal opportunity employer

Job summary

JazzWorld is seeking a Specialist Application Security & Pen Testing in Islamabad to evaluate risks and design mitigations for Jazz applications, APIs, and portals. The role involves testing, risk analysis and implementing security controls to protect the organization’s digital footprint.

Reports to the Stream Head Cyber Security and leads an extended team. Requires BS/MS in information security/IT and mobile/API security testing experience.

Qualifications

• BS/MS in information security/IT or equivalent.
• Experience in security design and penetration testing of mobile apps & APIs.
• Practical experience in application security, ideally in banking or telecom sectors.

Responsibilities

• Design, develop and maintain an application security framework for Jazz digital footprint.
• Identify security loopholes in Jazz systems including web portals and APIs.
• Perform security testing of Jazz services before going live.
• Conduct periodic security verifications and ensure data protection for applications.
• Coordinate with stakeholders to balance security controls with business needs.

Skills

Organizational skills

Stakeholder management

Analytical thinking

Penetration testing

Code review

Vulnerability assessment

Education

BS/MS in info security

Tools

OWASP

Security testing tools

Code review tools

Job description

Grade Level: L1

Location: Islamabad

Last Date to Apply: 2nd September 2026

What is Specialist Application Security & Pen Testing?

Specialist Application Security & Pen Testing is responsible to evaluate and plan mitigations of information security related risk to Jazz Applications, APIs and Portals and design and test cyber security controls to address those risks. Main responsibility of this role is to safeguard software applications for potential threats & vulnerabilities by analyzing and effectively testing implementation of different application security controls to protect organization's digital footprint from cyber threats.

The role reports directly to the Stream Head Cyber Security with an extended team of 11 team members.

What does Specialist Application Security & Pen Testing do?

• Design, develop and maintain a robust application security framework for Jazz digital footprint
• Identify loopholes in the custom developed/security systems of built servers, web portals/dashboards, user applications of Jazz.
• Perform security testing of all Jazz services before going live.
• Perform periodic security verifications of Jazz services
• Ensures the security/data protection for applications vulnerable to internal/external attackers.
• Detects bugs/errors embedded in the source code of android/iOS/other language based apps.
• Analyse the communication path/matrix of applications to track host servers and IP addresses accordingly.
• Performs relevant preventive measures to protect leakage of confidential/sensitive information.
• Coordinate and manage internal stakeholder expectations with the right balance of security controls.

JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.

Requirements

What are we looking for and what does it require to be Specialist Application Security & Pen Testing?

• BS/MS in information security/Information Technology
• Practical experience of application security in banking / Telco sector

At least 01 years of experience in security design and penetration testing of mobile applications & APIs

Functional

• Ability to organize, plan and document tasks;
• Ability to manage internal & external stakeholders;
• Possess good logical and analytical skills to help in analysis of Cyber Security risks

Technical

• In depth knowledge of the SDLC processes;
• In depth knowledge of multiple commonly used programming languages used for Mobile and Web based application programming and APIs;
• Knowledge/understanding of industry best practice secure software development frameworks (e.g. OWASP);
• In depth knowledge of Application, Network and System security controls
• In depth knowledge of API security controls and vulnerabilities
• Hands on experience of use of Penetration testing tools and code review
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks.
• Skill in conducting trend analysis and reporting.

Benefits

Why Join JazzWorld?

As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.

Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial - shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.

As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.

At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.