Software Engineer - Security Testing

Lahore, Punjab () 2 Positions

Job Description

Perform security analysis of application logs to detect anomalies and malicious activity.
Conduct vulnerability assessments for web, mobile, and API platforms, focusing on industry best practices.
Execute security testing aligned with OWASP Top 10, identifying common threats such as XSS, SQLi, CSRF, etc.
Analyze and remediate infrastructure-level vulnerabilities in coordination with relevant teams.
Escalate critical risks and security issues to stakeholders for timely mitigation.
Curate and assess vulnerability data from multiple tools, validating results and eliminating false positives.
Provide clear and actionable remediation guidance, both in written reports and verbal communications.
Evaluate the business impact of identified vulnerabilities and advise on risk prioritization.
Reproduce and validate vulnerabilities to confirm legitimacy and potential exploitation paths.
Create detailed security reports highlighting vulnerabilities, risk levels, and recommended fixes.
Assist in developing and configuring automated tools and scanning solutions to optimize testing workflows.
Ensure adherence to PCI DSS and other relevant compliance standards during assessments and design reviews.
Collaborate with development and engineering teams to promote secure design and implementation practices.
Support team members by resolving technical challenges and sharing expertise.
Mentor junior team members, fostering knowledge sharing and continuous improvement.
Participate in defining and improving security testing processes and workflows.
Conduct ongoing research on emerging vulnerabilities, tools, and security trends to stay ahead in the field.