Posted May 23, 2026 53 views
VYB is seeking a skilled Application Security Engineer with a strong background in web application security testing to join our team. The ideal candidate will have at least three years of hands-on experience in identifying, analyzing, and mitigating security vulnerabilities in web applications. This role involves working closely with development teams to design and implement security measures that protect sensitive data and maintain the integrity of our fintech and SaaS offerings. The Application Security Engineer will utilize tools like Burp Suite Pro to conduct thorough security assessments and perform threat modeling, ensuring that security is integrated into the software development lifecycle.
In this role, the engineer will also focus on compliance with regulatory standards and contribute to the development of security architecture that addresses current and emerging threats. While this position does not involve managing a team, it requires strong collaboration and communication skills to effectively write reports and provide recommendations that enhance the company's security posture. Experience with cloud security, particularly AWS and Azure environments, and knowledge of DevSecOps practices will be highly valuable in achieving VYB's security objectives.
Responsibilities
- Conduct comprehensive application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Interactive Application Security Testing (IAST) to identify vulnerabilities.
- Perform threat modeling and attack tree analysis to proactively evaluate potential security risks and design effective mitigation strategies.
- Collaborate with software development teams to embed security best practices and controls throughout the application development lifecycle.
- Assess and validate security controls in cloud environments such as AWS and Azure, ensuring compliance with established policies and frameworks.
- Utilize Burp Suite Pro and other security tools to conduct vulnerability assessments and penetration testing on web applications.
- Develop and maintain security architecture designs that align with organizational goals and regulatory requirements such as ISO/IEC 27001.
- Respond promptly to security incidents, performing root cause analysis and implementing corrective actions to prevent recurrence.
- Stay current with the OWASP Top Ten vulnerabilities and emerging application security threats to advocate for proactive security measures.
- Engage in security risk assessments and support compliance efforts with relevant regulatory standards impacting fintech and SaaS sectors.
- Work closely with DevOps teams to integrate DevSecOps practices, automating security testing and continuous monitoring.
- Analyze security logs using SIEM tools to detect and respond to potential malicious activity, including malware analysis where necessary.
- Provide clear and concise written reports detailing findings, risk implications, and remediation recommendations to technical and non-technical stakeholders.
- Support security control assessments and audits to ensure that application environments meet organizational and industry security standards.
Skills
What is your Competitive Advantage?
Similar Job Titles
Zohaib Ali
Marketing Manager
Digital Online Devices
Sehrish Azhar
Motivational Speaker & Blogger
Living Upbeat
Muzammil Baig
Digital Marketing Manager
IT Services Group
Ayesha Shaukat
Social Media Marketing Manager
Ivoke
Babar Ahmed Khan
Territory Sales Manager
Engro Foods
Usman Habib
Recruitment & Training Executive
ACS Synergy (Pvt) Ltd.
Zubair Anjum
Business Excellence Specialist
Nestle Pakistan
Aqib Irshad
Head of HR, Training & OD
FINCA
Ali Aziz
CEO
Shopistan
Mona Sharif
Senior Team Lead
Konext PVT. LTD
