Senior Application Security Engineer Bykea Technologies

Our client Bykea Technologies is looking for Senior Application Security Engineer in Karachi.

What You Will Do

• Lead threat modeling and secure design reviews for Bykeas applications and infrastructure ensuring secure-by-default architectures
  
• Design and implement scalable security solutions to proactively detect and remediate vulnerabilities
  
• Drive shift-left security by integrating SAST/DAST and other security tools within CI/CD pipelines
  
• Conduct advanced dynamic (DAST) and static (SAST) analysis across microservices and mobile applications
  
• Identify prioritize and remediate security risks across products features and infrastructure
  
• Define and enforce best practices for application security across the software development lifecycle (SDLC)
  
• Assess and mitigate risks from third-party libraries and dependencies
  
• Lead vulnerability triage and remediation efforts in collaboration with engineering teams
  
• Act as a security champion mentoring teams and promoting a strong security-first culture across the organization
  

About You

• 5 years of hands-on experience in Application Security with a strong track record of delivering measurable security improvements
  
• Strong proficiency in scripting/development (Python JavaScript preferred)
  
• Proven experience integrating and managing security tools (SAST DAST) within CI/CD environments
  
• Solid experience with cloud and infrastructure security (AWS Kubernetes Terraform/CloudFormation)
  
• Deep understanding of web security principles TLS/SSL authentication mechanisms and network protocols (HTTP/HTTPS TCP/IP etc.)
  
• Experience securing mobile applications web applications and microservices-based architectures
  
• Demonstrated ability to secure high-scale high-availability systems
  
• Familiarity with cloud platforms such as AWS or GCP and their security best practices
  
• Strong collaboration and communication skills with the ability to influence cross-functional teams
  
• Relevant certifications (e.g. OSCP AWS Security Specialty) are a plus