Cyber Security Engineer - Application Security & Compliance (Web & Mobile)

We are looking for a skilled Cyber Security Engineer specializing in Application Security and Compliance for both web and mobile platforms. In this role, you will lead a critical security initiative focused on addressing application-level vulnerabilities identified during Amazon’s security review. The goal is to close these gaps to ensure our platform meets compliance standards and gains approval for integration with Amazon. This is a hands-on position centered on application security; responsibilities related to cloud infrastructure or Azure administration are managed by dedicated specialists.

Key Responsibilities:
- Identify and remediate application-level security vulnerabilities that hinder compliance with Amazon’s security requirements and industry standards.
- Implement encryption protocols to protect sensitive data and personally identifiable information (PII) across applications.
- Design and integrate secure key management and secrets management solutions.
- Develop fine-grained role-based access control (RBAC) and permission frameworks covering all user roles and system functions.
- Design and deploy Multi-Factor Authentication (MFA) and other advanced authentication mechanisms for web and mobile applications.
- Review and improve how sensitive information is stored, transmitted, accessed, and displayed throughout the platform.
- Enhance authentication, authorization, session management, and account security controls.
- Implement audit logging and monitoring for sensitive data access and security-related events.
- Integrate automated vulnerability scanning and code security tools (SAST/DAST) into the software release pipeline.
- Collaborate closely with cloud and security teams to ensure application changes support infrastructure-level security controls.
- Ensure ongoing alignment with Amazon’s compliance requirements and industry best practices in security.

Required Qualifications:
- Minimum of 5 years’ experience in application security or secure software development.
- Strong hands-on expertise with data encryption, key management, and secrets management.
- Proven experience implementing RBAC, MFA, and secure authentication/session management in production environments.
- Deep knowledge of OWASP Top 10 vulnerabilities, secure coding standards, and vulnerability remediation techniques.
- Experience integrating security tools such as SAST and DAST into CI/CD pipelines.
- Demonstrated ability securing both web and mobile applications.
- Experience working towards third-party or enterprise compliance frameworks (e.g., Amazon, PCI DSS, SOC 2) is highly desirable.
- Excellent communication and collaboration skills to work effectively with cross-functional teams.

Job Details:
- Working hours: 9:00 AM to 6:00 PM (PKT)
- Workdays: Monday to Friday, onsite
- Experience required: 5+ years

This role offers the opportunity to directly influence the security posture of a platform aiming for high-profile compliance and integration. If you are passionate about application security and enjoy working in a collaborative environment focused on delivering secure, compliant solutions, this position is an excellent fit.