Senior Application Security Engineer

Bykea


Date: 8 hours ago
City: Karachi
Contract type: Full time
What You Will Do
  • Lead threat modeling and secure design reviews for Bykea’s applications and infrastructure, ensuring secure-by-default architectures
  • Design and implement scalable security solutions to proactively detect and remediate vulnerabilities
  • Drive “shift-left” security by integrating SAST/DAST and other security tools within CI/CD pipelines
  • Conduct advanced dynamic (DAST) and static (SAST) analysis across microservices and mobile applications
  • Identify, prioritize, and remediate security risks across products, features, and infrastructure
  • Define and enforce best practices for application security across the software development lifecycle (SDLC)
  • Assess and mitigate risks from third-party libraries and dependencies
  • Lead vulnerability triage and remediation efforts in collaboration with engineering teams
  • Act as a security champion, mentoring teams and promoting a strong security-first culture across the organization

About You
  • 5+ years of hands-on experience in Application Security, with a strong track record of delivering measurable security improvements
  • Strong proficiency in scripting/development (Python, JavaScript preferred)
  • Proven experience integrating and managing security tools (SAST, DAST) within CI/CD environments
  • Solid experience with cloud and infrastructure security (AWS, Kubernetes, Terraform/CloudFormation)
  • Deep understanding of web security principles, TLS/SSL, authentication mechanisms, and network protocols (HTTP/HTTPS, TCP/IP, etc.)
  • Experience securing mobile applications, web applications, and microservices-based architectures
  • Demonstrated ability to secure high-scale, high-availability systems
  • Familiarity with cloud platforms such as AWS or GCP and their security best practices
  • Strong collaboration and communication skills, with the ability to influence cross-functional teams
  • Relevant certifications (e.g., OSCP, AWS Security Specialty) are a plus

How to apply

To apply for this job you need to authorize on our website. If you don't have an account yet, please register.

Post a resume

Similar jobs

Team Lead AI and Computer Vision

JBS Global - Jaffer Business Systems, Karachi
1 week ago
About the Company: JBS AI is the artificial intelligence and custom software division of JBS. We build enterprise computer vision, automation, and AI agent solutions for clients across four regions.Role Overview: This role owns delivery across the JBS AI project portfolio — taking a project from signed scope through to shipped, on time, and accepted by the client. The role...

Principle Software Engineer (Frontend)

Dubizzle Labs, Karachi
1 week ago
dubizzle "Squads" are high performing x-functional teams set with a mission to provide win-win exchanges for our beloved users. We believe engineers are central to the problem discovery process, which is why we let teams own the "what and how" of their respective missions.We are here to bring on digital disruption and to build the best platform the Middle East...

GRC Analyst

Alykas, Karachi
2 weeks ago
Karachi Based Job!!We are looking for an experienced GRC Analyst to support our US-based clients. The ideal candidate must have hands-on experience with US compliance and cybersecurity frameworks, and hold relevant industry-recognized certifications. Position: GRC Analyst (Certified – Mandatory) Experience: 4–5 years Employment Type: Full-Time Work Model: Onsite (6 PM to 3 AM Pakistan Time) Office location: NASTP, Shahrah-e-Faisal, Karachi.Key...