Specialist Application Security & Pen Testing

PMCL-JAZZ; Islamabad; On-site; PKR 900,000 - 1,500,000; Full time

Job summary

JazzWorld is seeking a Specialist for Application Security & Pen Testing to design and maintain a robust security framework across Jazz digital platforms, including APIs, portals, and mobile apps.

You will identify security gaps, conduct testing before deployment, and verify ongoing protection of data against internal and external threats, coordinating with stakeholders and the Stream Head Cyber Security.

Qualifications

• Practical experience of application security in banking / Telco sector.
• At least 01 years of experience in security design and penetration testing of mobile applications & APIs.
• Ability to organize, plan and document tasks; manage internal & external stakeholders.

Responsibilities

• Design, develop and maintain a robust application security framework for Jazz digital footprint
• Identify loopholes in the custom developed/security systems of built servers, web portals/dashboards, user applications of Jazz.
• Perform security testing of all Jazz services before going live.
• Perform periodic security verifications of Jazz services
• Ensures the security/data protection for applications vulnerable to internal/external attackers.
• Detects bugs/errors embedded in the source code of android/iOS/other language based apps.
• Analyse the communication path/matrix of applications to track host servers and IP addresses accordingly.
• Performs relevant preventive measures to protect leakage of confidential/sensitive information.
• Coordinate and manage internal stakeholder expectations with the right balance of security controls.

Skills

Information security

Application security

Penetration testing

Education

BS/MS in information security/Information Technology

Tools

OWASP

Penetration testing tools

Job description

Grade Level: L1

Location: Islamabad

Laste Date to Apply: 2nd September 2026

What is Specialist Application Security & Pen Testing?

Specialist Application Security & Pen Testing is responsible to evaluate and plan mitigations of information security related risk to Jazz Applications, APIs and Portals and design and test cyber security controls to address those risks. Main responsibility of this role is to safeguard software applications for potential threats & vulnerabilities by analyzing and effectively testing implementation of different application security controls to protect organization’s digital footprint from cyber threats.

The role reports directly to the Stream Head Cyber Security with an extended team of 11 team members.

What does Specialist Application Security & Pen Testing do?

• Design, develop and maintain a robust application security framework for Jazz digital footprint
• Identify loopholes in the custom developed/security systems of built servers, web portals/dashboards, user applications of Jazz.
• Perform security testing of all Jazz services before going live.
• Perform periodic security verifications of Jazz services
• Ensures the security/data protection for applications vulnerable to internal/external attackers.
• Detects bugs/errors embedded in the source code of android/iOS/other language based apps.
• Analyse the communication path/matrix of applications to track host servers and IP addresses accordingly.
• Performs relevant preventive measures to protect leakage of confidential/sensitive information.
• Coordinate and manage internal stakeholder expectations with the right balance of security controls.

JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.

What are we looking for and what does it require to be Specialist Application Security & Pen Testing?

• BS/MS in information security/Information Technology
• Practical experience of application security in banking / Telco sector
• At least 01 years of experience in security design and penetration testing of mobile applications & APIs

Functional

• Ability to organize, plan and document tasks;
• Ability to manage internal & external stakeholders;
• Possess good logical and analytical skills to help in analysis of Cyber Security risks

Technical

• In depth knowledge of the SDLC processes;
• In depth knowledge of multiple commonly used programming languages used for Mobile and Web based application programming and APIs;
• Knowledge/understanding of industry best practice secure software development frameworks (e.g. OWASP);
• In depth knowledge of Application, Network and System security controls
• In depth knowledge of API security controls and vulnerabilities
• Hands on experience of use of Penetration testing tools and code review
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks.
• Skill in conducting trend analysis and reporting.

Why Join JazzWorld?

As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.

Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial - shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.

As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.

At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.