Web Application Security Engineer-Karachi

State Bank of Pakistan, Karachi                                                                Qualification:

• Masters or Bachelor’s Degree (16 years) of education) in Computer Science / Software Engineering / Computer Engineering from HEC recognized institutions or from a reputable foreign university.
  

Experience:

• Minimum 03 years of working experience in IT including 02 years’ experience in web application security with specific focus on: Performing penetration testing and secure code review   

Jobs Description:

• Identifying and remediating web application vulnerabilities such as OWASP Top 10 Experience in use of various commercial and open source penetration testing tools and methodologies and performing penetration testing of web applications and underlying technologies
• Strong software design and implementation know-how, strong familiarity with web protocols, a thorough knowledge of Linux/Unix tools and architecture, and be well-versed in application security and infrastructure security Experience of implementing cybersecurity best practices
• Experience of implementing and managing enterprise PKI technologies, DB encryption technologies, digital certificates and their integration with various applications, OS and DBMS.
• Exposure of implementing and optimizing Web Application Firewall both on premise and on the cloud. Have reasonable familiarity with application development languages                                                                                             
• Performs static/dynamic code testing, manual code inspection, threat modelling, design reviews and penetration testing of web applications to identify vulnerabilities and security flaws.
  
• Enforces the implementation of secure design principles according to organizational standards, and patterns of information security.
  Serves as a Subject Matter Expert (SME) on web application security for software projects during various phases.
  
• Development and implementation of manual and automated cyber security testing methods for web applications.
  
• Coordinate with cyber security product vendors and service providers to evaluate product & service offerings, including product evaluations, proof of concept and pilot implementations