application security engineer Jobs in Islamabad

application security engineer

technical consultant

ai consultant

aso expert

associate client support ciq Jobs in Islamabad

associate client support ciq

expert application product security

Jazz

<div>
 
 
 Grade: L2
 
 
 
 
 Location: Islamabad
 
 
 
 
 Last date to apply: 26 April 2026
 
 
 
 
 
 What is Expert Application &amp; Product Security?
 
 
 
 
 Expert Application &amp; Product Security
 
 is responsible to drive secure design, development, and deployment of digital products. This role is responsible for embedding security across the&nbsp;
 
 software development lifecycle (SDLC)
 
 , securing APIs and microservices, and ensuring products are resilient against evolving cyber threats.
 
 
 Main responsibility of this role is to safeguard software applications for potential threats &amp; vulnerabilities by analyzing and effectively testing implementation of different application security controls to protect organization's digital footprint from cyber threats.
 
 
 The role reports directly to the Stream Head Cyber Security with an extended team of 11 team members.
 
 
 &nbsp;
 
 
 
 What does Expert Application &amp; Product Security?
 
 
 
 1.&nbsp;&nbsp;&nbsp;&nbsp; Define and lead the&nbsp;
 
 Application Security (AppSec) strategy
 
 &nbsp;across all products
 
 
 2.&nbsp;&nbsp;&nbsp;&nbsp; Establish secure SDLC (SSDLC) frameworks and governance
 
 
 3.&nbsp;&nbsp;&nbsp;&nbsp; Develop policies, standards, and secure coding guidelines
 
 
 4.&nbsp;&nbsp;&nbsp;&nbsp; Align AppSec with enterprise risk management and business objectives
 
 
 5.&nbsp;&nbsp;&nbsp;&nbsp; Conduct threat modelling (STRIDE, attack trees) for applications and platforms
 
 
 6.&nbsp;&nbsp;&nbsp;&nbsp; Review and approve secure architectures for:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Web and mobile applications
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; APIs and microservices
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cloud-native platforms
 
 
 7.&nbsp;&nbsp;&nbsp;&nbsp; Enforce best practices based on&nbsp;OWASP&nbsp;standards (Top 10, ASVS, API Top 10)
 
 
 8.&nbsp;&nbsp;&nbsp;&nbsp; Integrate security into CI/CD pipelines:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAST, DAST, SCA, IAST
 
 
 9.&nbsp;&nbsp;&nbsp;&nbsp; Automate security testing and policy enforcement
 
 
 10.&nbsp; Work closely with DevOps teams to implement "shift-left" security
 
 
 11.&nbsp; Define security gates and release criteria
 
 
 12.&nbsp; Secure externally exposed products and services
 
 
 13.&nbsp; Implement API security controls:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Authentication (OAuth2, JWT)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Rate limiting, bot protection
 
 
 14.&nbsp; Protect against:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Injection attacks
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Broken authentication
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Business logic abuse
 
 
 15.&nbsp; Secure Android/iOS applications:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Reverse engineering protection
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; Runtime protection (RASP)
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Secure storage &amp; communication
 
 
 16.&nbsp; Conduct mobile app security testing
 
 
 17.&nbsp; Implement API gateways and secure API lifecycle management
 
 
 18.&nbsp; Conduct secure coding training for developers
 
 
 19.&nbsp; Provide remediation guidance and best practices
 
 
 20.&nbsp; Build a security-first culture within software engineering teams
 
 
 &nbsp;
 
 
 
 JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.
 
 
 
 
 
 Requirements
 
 
 
 
 
 What are we looking for and what does it require to be Expert Application &amp; Product Security?
 
 
 <ul>
 <li>
 BS/MS in CyberSecurity/Information security/Information Technology
 </li>
 <li>
 Practical experience of application security in Banking / Telco sector
 </li>
 </ul>
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; At least 04 years of experience in security design and penetration testing of mobile applications &amp; APIs
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Functional
 
 
 
 o&nbsp;&nbsp; Ability to organize, plan and document tasks;
 
 
 o&nbsp;&nbsp; Ability to manage internal &amp; external stakeholders;
 
 
 o&nbsp;&nbsp; Possess good logical and analytical skills to help in analysis of Cyber Security risks
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Technical
 
 
 
 o&nbsp;&nbsp; Strong expertise in:
 
 
 &sect;&nbsp; Web application security (OWASP Top 10)
 
 
 &sect;&nbsp; API security and microservices
 
 
 &sect;&nbsp; Authentication &amp; authorization models
 
 
 o&nbsp;&nbsp; Experience with manual penetration testing
 
 
 o&nbsp;&nbsp; Hands-on with:
 
 
 &sect;&nbsp; SAST: Checkmarx, Fortify, SonarQube
 
 
 &sect;&nbsp; DAST: Burp Suite, OWASP ZAP
 
 
 &sect;&nbsp; SCA: Snyk, Black Duck
 
 
 o&nbsp;&nbsp; Understanding of:
 
 
 &sect;&nbsp; Java, .NET, Node.js, Python (at least one deeply)
 
 
 &sect;&nbsp; CI/CD pipelines (Jenkins, GitLab, GitHub Actions)
 
 
 o&nbsp;&nbsp; Familiarity with Infrastructure as Code (Terraform, etc.)
 
 
 o&nbsp;&nbsp; Lead and mentor Application Security Testers
 
 
 o&nbsp;&nbsp; Define KPIs and performance metrics
 
 
 o&nbsp;&nbsp; Stakeholder management across Dev, QA, Product, and Risk teams
 
 
 
 
 Benefits
 
 
 
 
 
 Why join JazzWorld?
 
 
 
 As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.
 
 
 Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.
 
 
 As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.
 
 
 At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.
 
</div>

Expert Application & Product Security

<div>
 
 
 Grade: L2
 
 
 
 
 Location: Islamabad
 
 
 
 
 Last date to apply: 23 April 2026
 
 
 
 
 
 What is Expert Digital Products?
 
 
 
 To continue transforming the digital experience of our millions of users, we are building a world-class digital team with the right talent to scale rapidly. This is an opportunity for someone who wants to be part of a high-impact journey&mdash;playing a critical role in ensuring the reliability, performance, and evolution of our digital platforms.
 
 
 We're looking for a technically strong and focused professional to support and optimize our Digital ecosystem. In this role, you will manage platform operations, improve system stability, support smooth releases, and help scale our cloud and infrastructure in line with our Digital Strategy. The focus will be on delivering a seamless experience across digital platforms, including mobile apps and video streaming services.
 
 
 &nbsp;
 
 
 
 What does Expert Digital Products do?
 
 
 <ul>
 <li>
 Support the day-to-day operations of Digital Mobile App, ensuring high availability, performance, and seamless user experience.
 </li>
 <li>
 Collaborate with development, QA, and product teams to ensure smooth feature releases and operational readiness.
 </li>
 <li>
 Monitor and manage production systems, troubleshoot issues, and coordinate timely resolution with internal and external teams.
 </li>
 <li>
 Implement and track cybersecurity fixes, vulnerability patches, and compliance requirements across platforms.
 </li>
 <li>
 Assist in managing and optimizing cloud infrastructure (AWS/Azure/GCP), including cost monitoring and performance tuning.
 </li>
 <li>
 Work closely with DevOps teams to maintain CI/CD pipelines, automate deployments, and improve release cycles.
 </li>
 <li>
 Support incident management, root cause analysis (RCA), and preventive measures to avoid recurrence.
 </li>
 <li>
 Assist in vendor coordination for platform-related issues, upgrades, and support activities.
 </li>
 <li>
 Monitor system KPIs, logs, and analytics to ensure service reliability and performance benchmarks are met.
 </li>
 <li>
 Contribute to documentation, standard operating procedures (SOPs), and operational playbooks.
 </li>
 <li>
 Ensure adherence to best practices in DevOps, cloud security, and platform operations.
 
 </li>
 </ul>
 
 
 JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.
 
 
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 5-6 years of experience in software engineering, DevOps, cloud operations, or platform support roles.
 </li>
 <li>
 Bachelor's degree in Computer Science, Engineering, or a related field.
 </li>
 <li>
 Hands-on experience with cloud platforms (AWS preferred; Azure/GCP is a plus).
 </li>
 <li>
 Working knowledge of DevOps tools and practices (CI/CD pipelines, Git, Jenkins, etc.).
 </li>
 <li>
 Hands on development experience on front end / backend technologies (python, react, php, Java etc)
 </li>
 <li>
 Familiarity with containerization technologies (Docker, Kubernetes) and microservices architecture.
 </li>
 <li>
 Experience in application monitoring and troubleshooting in production environments.
 </li>
 <li>
 Basic understanding of cybersecurity practices, vulnerability management, and system hardening.
 </li>
 <li>
 Knowledge of APIs (REST/SOAP) and backend integrations.
 </li>
 <li>
 Experience with databases such as MySQL, MariaDB, or similar.
 </li>
 <li>
 Familiarity with monitoring/logging tools and analytics platforms (e.g., Firebase, Grafana, etc.).
 </li>
 <li>
 Strong problem-solving skills with the ability to work in a fast-paced operational environment.
 
 </li>
 </ul>
 
 
 Good to Have
 
 
 <ul>
 <li>
 Cloud or DevOps certifications (AWS, Kubernetes, etc.)
 </li>
 <li>
 Agile/Scrum certifications
 </li>
 <li>
 Exposure to video streaming platforms
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 
 
 Why join JazzWorld?
 
 
 
 As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.
 
 
 Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.
 
 
 As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.
 
 
 At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.
 
</div>

Expert Digital Products

<div>
 
 
 Grade: L2/L3
 
 
 
 
 Location: Islamabad
 
 
 
 
 Last date to apply: 30 April 2026
 
 
 
 
 
 What is Telco Network Security Expert?
 
 
 
 
 Telco Network Security Expert
 
 is responsible to lead the design, implementation, and continuous improvement of security controls across Jazz's telecom core, signaling infrastructure, and cloud-native NFVI/5G environments.
 
 
 This role is critical in protecting the organization against evolving threats targeting SS7/Diameter signaling, 4G EPC, and 5G Service-Based Architecture (SBA), while ensuring secure adoption of virtualization and cloud-native network functions.
 
 
 The role reports directly to the Manager Architecture &amp; Cloud Security with an extended team of 15 team members.
 
 
 
 
 What does Telco Network Security Expert do?
 
 
 
 1.&nbsp;&nbsp;&nbsp;&nbsp; Secure SS7, Diameter, and 5G SBA (Service-Based Architecture) signaling networks
 
 
 2.&nbsp;&nbsp;&nbsp;&nbsp; Implement signaling firewalls and anti-fraud controls (SMS, voice, roaming attacks)
 
 
 3.&nbsp;&nbsp;&nbsp;&nbsp; Monitor and mitigate attacks such as:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Location tracking (ATI abuse)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; SMS interception
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Call redirection / spoofing
 
 
 4.&nbsp;&nbsp;&nbsp;&nbsp; Ensure secure interconnects with roaming partners and third parties
 
 
 5.&nbsp;&nbsp;&nbsp;&nbsp; Design and enforce security for:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EPC (MME, SGW, PGW, HSS)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; 5G Core (AMF, SMF, UPF, AUSF, UDM, NRF)
 
 
 6.&nbsp;&nbsp;&nbsp;&nbsp; Implement security controls aligned with 3GPP standards
 
 
 7.&nbsp;&nbsp;&nbsp;&nbsp; Secure APIs in 5G SBA architecture (OAuth2, TLS, API gateways)
 
 
 8.&nbsp;&nbsp;&nbsp;&nbsp; Perform security hardening of network functions (VNFs/CNFs)
 
 
 9.&nbsp;&nbsp;&nbsp;&nbsp; Secure NFV infrastructure (OpenStack, Kubernetes, containers)
 
 
 10.&nbsp; Implement micro-segmentation and zero-trust models
 
 
 11.&nbsp; Ensure workload protection for CNFs and VNFs
 
 
 12.&nbsp; Integrate telco workloads with cloud security controls (public/private cloud)
 
 
 13.&nbsp; Monitor telecom-specific threats using SIEM/SOC platforms
 
 
 14.&nbsp; Integrate telecom probes and logs (signaling, GTP, Diameter) into SOC
 
 
 15.&nbsp; Lead incident response for telecom network attacks
 
 
 16.&nbsp; Conduct threat hunting focused on telecom fraud and signaling abuse
 
 
 17.&nbsp; Define end-to-end telecom security architecture
 
 
 18.&nbsp; Evaluate and deploy telecom security tools:
 
 
 a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Signaling firewalls (SS7/Diameter/5G)
 
 
 b.&nbsp;&nbsp;&nbsp;&nbsp; DDoS protection systems
 
 
 c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IDS/IPS for telco protocols
 
 
 19.&nbsp; Provide technical leadership for secure rollout of new services (VoLTE, IoT, 5G slicing)
 
 
 
 
 JazzWorld is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.
 
 
 
 
 
 
 Requirements
 
 
 
 
 
 What are we looking for and what does it require to be Telco Network Security Expert?
 
 
 <ul>
 <li>
 BS/MS in Telecom/Information Technology
 </li>
 <li>
 Practical experience of telecom network
 </li>
 </ul>
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5+ Years of experience in telecom security or core network operations
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Functional
 
 
 
 o&nbsp;&nbsp; Ability to organize, plan and document tasks;
 
 
 o&nbsp;&nbsp; Ability to manage internal &amp; external stakeholders;
 
 
 o&nbsp;&nbsp; Possess good logical and analytical skills to help in analysis of Cyber Security risks
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 
 Technical
 
 
 
 o&nbsp;&nbsp; Strong understanding of:
 
 
 &sect;&nbsp; SS7, SIGTRAN, Diameter, GTP, SIP
 
 
 &sect;&nbsp; LTE EPC and 5G Core architecture
 
 
 o&nbsp;&nbsp; Experience with roaming and interconnect security
 
 
 o&nbsp;&nbsp; Hands-on with:
 
 
 &sect;&nbsp; Network security (firewalls, IDS/IPS, DPI)
 
 
 &sect;&nbsp; SIEM platforms (Splunk, ELK, QRadar, etc.)
 
 
 &sect;&nbsp; Threat intelligence and incident response
 
 
 o&nbsp;&nbsp; Experience with:
 
 
 &sect;&nbsp; Kubernetes, Docker
 
 
 &sect;&nbsp; OpenStack / NFV environments
 
 
 &sect;&nbsp; API security and service mesh
 
 
 o&nbsp;&nbsp; Signaling Firewalls (e.g., Mobileum, Enea, Ericsson)
 
 
 o&nbsp;&nbsp; Fraud Management Systems
 
 
 o&nbsp;&nbsp; DDoS mitigation platforms
 
 
 o&nbsp;&nbsp; Packet capture and analysis tools
 
 
 
 
 Benefits
 
 
 
 
 
 Why join JazzWorld?
 
 
 
 As a certified Top Employer, JazzWorld reflects workplace standards benchmarked against leading global organizations, demonstrating our commitment to creating an environment where people can thrive and perform at their best. Our teams are driven by the belief that every JazzWorld employee should be inspired to live better every day, enabled by forward-looking leadership, an open culture, meaningful work, and continuous opportunities to learn and grow.
 
 
 Our core values - Customer Obsession, Truthful, Innovation, Collaboration, and Entrepreneurial shape how we think, decide, and lead. They encourage us to challenge convention, act with accountability, work as one team, and create solutions that truly matter for our customers and communities.
 
 
 As Pakistan's largest digital operator, JazzWorld serves over 100 million through connectivity, digital services, financial inclusion, entertainment, and insurance. Joining us means being part of transformation at a national scale; expanding access, unlocking opportunity, and building a more connected digital future.
 
 
 At JazzWorld, everything we do is rooted in one shared ambition. This purpose defines how we work, the progress we enable, and the difference we strive to make every day a Better Life For All.
 
</div>

Expert Telco Network Security

Telenor

<div>
 
 Application Deadlines:
 
 May 5th, 2026
 
 
 
 Position Title:
 
 Senior Coupa Techno-Functional Expert
 
 
 
 Reporting to:
 
 Procurement System lead
 
 
 
 Job Group:
 
 JG &ndash; 3
 
 
 
 Location:
 
 Islamabad
 
 
 
 Division:
 
 Telenor Shared Services Pakistan
 
 
 
 Department:
 
 Finance and Procurement
 
 
 
 Unit:
 
 Procurement Systems Squad
 
 
 
 Why should you join Telenor
 
 
 
 At Telenor Shared Services Pakistan, we give you the opportunity to thrive as a skilled professional in your chosen field of interest. Being rated as the top employer of the country, we enable you to realize your dreams in an environment of diversity and openness to new mindsets.
 
 
 
 Position Related:
 
 
 
 We&rsquo;re looking for Senior DevOps Expert Coupa having responsibility for the development and operation of the Coupa according to the best practices and customers&rsquo; expectations. This position requires to be familiar with DevOps way of work as per agile practices.
 
 
 
 Goals
 
 
 
 Telenor is using cloud based spend management solution known as &ldquo;Coupa&rdquo; covering the sourcing &amp; purchasing services. This is global solution and integrated with other cloud-based ERPs. As a DevOps expert you will be working closely with Coupa Squad members along with customers to support their day to day operational &amp; development activities.
 
 
 <ul>
 <li>
 Evaluate and standardize solutions across Telenor Business Units in the areas of Sourcing, Contracting, Procurement, and Supply Chain Management, ensuring alignment with global processes and best practices
 </li>
 <li>
 Perform detailed analysis of business requirements and recommend process improvements and optimization opportunities within the procurement and supply chain domain
 </li>
 <li>
 Operate within a DevOps environment to support, stabilize, and continuously improve delivered solutions, ensuring high system reliability and performance
 </li>
 <li>
 Support end-to-end delivery of S2P processes including sourcing, supplier management, catalog management, and item management, ensuring alignment with business needs
 </li>
 <li>
 Play a key role in handling complex scenarios and DTBs, ensuring timely resolution through structured analysis, coordination, and solutioning
 </li>
 <li>
 Collaborate closely with integration teams, ERP teams, and other stakeholders to coordinate issue resolution, enhancements, and cross-system dependencies
 </li>
 <li>
 Act as a functional and technical bridge between business and delivery teams, ensuring clear understanding of requirements and effective implementation
 </li>
 <li>
 Drive standardization and harmonization of processes and solutions across BUs, supporting the broader shared services operating model
 </li>
 <li>
 Contribute to identifying opportunities for automation and efficiency improvements within procurement processes
 </li>
 <li>
 Ensure delivery against KPIs defined in SLAs, proactively monitoring performance and driving improvements where required
 </li>
 <li>
 Maintain adherence to Telenor governance, security policies, and ICFR compliance requirements
 
 
 </li>
 </ul>
 
 Your Typical day at work
 
 
 
 <ul>
 <li>
 Maintain strong understanding of Coupa functionalities, configurations, and integration touchpoints, ensuring effective support and solutioning across processes
 </li>
 <li>
 Analyze new requirements raised in change forums, providing structured functional solutions aligned with global design standards and system capabilities
 </li>
 <li>
 Support and enhance reporting solutions, custom configurations, and data structures, ensuring consistency and usability across Business Units
 </li>
 <li>
 Collaborate with project and DevOps teams during ongoing initiatives to validate solution design, ensure alignment with global templates, and manage cross-functional dependencies
 </li>
 <li>
 Play an active role in handling complex scenarios and DTBs, driving root cause analysis and coordinating with relevant teams (integration, ERP, vendors) for resolution
 </li>
 <li>
 Continuously explore and evaluate new or underutilized Coupa functionalities, identifying opportunities for process improvement and standardization
 </li>
 <li>
 Perform functional validation and testing of new releases and changes, ensuring system stability and minimal business disruption
 </li>
 <li>
 Participate in governance, change, and operational forums as a subject matter expert, providing guidance on process design, system capabilities, and best practices
 </li>
 <li>
 Contribute to process standardization and harmonization efforts across BUs, supporting the shared services operating model
 
 
 </li>
 </ul>
 
 Eligibility Criteria
 
 
 
 
 Education:
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree or higher in IT/Computer Sciences or similar along with functional overview of Financials/Supply Chain Management processes.
 </li>
 <li>
 Degree in Finance/ CA / ACCA is also accepted provided with relevant experience of ERP implementation.
 
 
 </li>
 </ul>
 Work experience:
 
 
 <ul>
 <li>
 Successful ERP implementation including the S2P/SCM solutions.
 </li>
 <li>
 Have 7+ years of experience covering process design, system configuration, testing, development specification and end user training.
 
 
 </li>
 </ul>
 Nice to know:
 
 
 <ul>
 <li>
 Coupa application knowledge.
 </li>
 <li>
 Agile way of work.
 </li>
 <li>
 Relevant certification/subject to experience in the tool and technology
 
 
 </li>
 </ul>
 
 Potential Career Path:
 
 
 
 <ul>
 <li>
 Expand and develop expertise in areas of Supply Chain Management together with source to pay exposure in Global environment.
 
 
 </li>
 </ul>
 
 Functional Skills / Knowledge Areas:
 
 
 
 <ul>
 <li>
 Structured and self-driven, with a focus on deliverables
 </li>
 <li>
 Solutions oriented with strong analytical skills.
 </li>
 <li>
 Capable of meeting deadlines while ensuring quality under pressure in a challenging environment
 </li>
 <li>
 Ability to work within multiple time zones and diverse culture.
 </li>
 <li>
 Ability to perform duties during public holidays, in shifts and off days
 </li>
 <li>
 Have good communication skills and proficiency in English.
 </li>
 </ul>
</div>

Senior Coupa Techno-Functional Expert

PackageX

<div>
 
 About PackageX
 
 :
 
 
 PackageX is the execution layer for physical AI in enterprise logistics. We enable enterprises to see, understand, and execute real-world logistics operations in real time using Vision-Language-Action intelligence.
 
 
 We sit between systems of record (ERP, WMS, TMS) and the physical world, turning cameras, people, and automation into deterministic, auditable workflows. Rather than replacing existing systems, PackageX makes them operationally intelligent.
 
 
 We start with inbound receiving, the highest-friction choke point in logistics, and expand across adjacent workflows, sites, and automation modes. This creates a workflow-led enterprise expansion motion that compounds inside complex operations.
 
 
 We're a fast-growing pre-Series A stage startup in New York City with a distributed global team backed by Bullpen Capital, Pritzker Group, Sierra Ventures, Ludlow Ventures, MXV Capital, and NSV Wolf Capital.
 
 
 
 What We Are Looking For
 
 
 
 We&rsquo;re looking for a security engineer who is serious about their craft and genuinely curious about where the field is heading. This role sits at the intersection of traditional application security and the new challenges that come with building AI-powered products. You&rsquo;ll own security end-to-end, from hardening our cloud infrastructure and reviewing code, to thinking through what it means to secure systems that use large language models. You don&rsquo;t need to have done this exact job before, but you should be the kind of engineer who stays curious, learns fast, and cares deeply about getting things right.
 
 
 
 You will:
 
 
 
 <ul>
 <li>
 Own security across the SDLC from threat modeling during design, to security reviews during development, to vulnerability scanning in CI/CD. You&rsquo;ll use modern tooling (including AI-powered scanners where they genuinely help) to keep pace with a fast-moving engineering team
 </li>
 <li>
 Conduct vulnerability assessments and penetration tests across our web applications, APIs, and infrastructure. You&rsquo;ll identify issues before attackers do, document findings clearly, and work directly with developers to get them fixed
 </li>
 <li>
 Write and maintain security policies that engineers will actually follow, clear, practical, and grounded in how the team actually works, not copied from a compliance template
 </li>
 <li>
 Think carefully about the security risks that come with AI-powered products, such as prompt injection, sensitive data leaking through model outputs, and how to keep our LLM integrations safe for customers. This is a newer area, and you&rsquo;ll be helping us figure it out as we go
 </li>
 <li>
 Report on security posture to engineering leadership, tracking gaps, trends, and open issues in a way that helps the team prioritize and act, not just tick compliance boxes
 </li>
 <li>
 Review code for security issues and work closely with developers to fix them, building habits and processes so security feedback becomes a normal part of how the team ships, not a last-minute blocker
 </li>
 <li>
 Define and maintain security standards for how we build and deploy software, writing clear guidelines, putting automated checks in place, and making it easy for engineers to do the right thing by default
 </li>
 <li>
 Build automation that makes security work scale &mdash; whether that&rsquo;s smarter alerting, faster triage, or tooling that helps developers catch and fix issues without needing a security engineer in every conversation
 </li>
 <li>
 Participate in product and engineering design discussions &mdash; raising security concerns early, helping the team understand the risks, and finding solutions that don&rsquo;t slow down shipping
 </li>
 <li>
 Embed security into our CI/CD pipelines and development workflows &mdash; reducing the time between finding a vulnerability and getting it fixed, and making security a shared responsibility across the engineering team
 </li>
 <li>
 Keep up with how the security landscape is evolving &mdash; particularly as AI becomes a bigger part of how software is built and attacked. You&rsquo;ll bring that knowledge back to the team and help us stay ahead of new threats
 
 
 
 </li>
 </ul>
 
 Skills and Qualification:
 
 
 
 <ul>
 <li>
 A degree in Computer Science, Information Security, or a related field
 </li>
 <li>
 3+ years of hands-on experience in application security or security engineering.
 </li>
 <li>
 Proven ability to build, manage, and monitor security in production environments where reliability matters &mdash; you&rsquo;ve operated under pressure, handled incidents, and know what it takes to keep systems safe at scale
 </li>
 <li>
 Solid experience securing web applications, APIs, and cloud infrastructure &mdash; covering areas like intrusion detection, access control design, incident response, and security policy development. You know the fundamentals well and can apply them in a real product context
 </li>
 <li>
 Experience with static and dynamic code analysis, you&rsquo;ve worked with SAST and DAST tools, know their limitations, and can help developers actually act on what those tools surface rather than just generating noise
 </li>
 <li>
 Familiarity with modern cloud architectures, serverless, microservices, and API-first designs. Bonus if you&rsquo;ve thought about what it means to secure systems that call LLM APIs or handle AI-generated outputs as part of their core workflow
 </li>
 <li>
 Strong understanding of OWASP Top 10 vulnerabilities and how to defend against them. Familiarity with the OWASP Top 10 for LLMs is a plus; we&rsquo;re building AI-powered products and need someone who can think through what that means for security
 </li>
 <li>
 Good understanding of RESTful API security, authentication, authorization, rate limiting, and input validation. Our platform is API-heavy, and we need someone who can spot the common mistakes and knows how to prevent them
 </li>
 <li>
 Strong experience in penetration testing and vulnerability analysis. You can run an assessment end-to-end, write up findings that people actually read, and follow through until issues are resolved &mdash; not just hand over a report and move on
 </li>
 <li>
 Experience working with AWS and/or GCP, securing cloud infrastructure, managing IAM policies, and understanding how cloud-native services introduce their own security considerations. We run primarily on AWS
 
 
 
 </li>
 </ul>
 
 What can you expect from the application process?
 
 
 
 All applications will be looked at by the People team, who will reach out to shortlisted candidates. Across various interview rounds, you'll speak with the hiring manager and other functional heads. We want to have an open discussion about your work and how we can be a great fit. The process may also involve an assessment or presentation relevant to the role. You can expect an offer after three rounds of interviews. All offers are subject to satisfactory reference and background checks.
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>

Application Security Engineer

<div><div><div><div>About PackageX:</div>
<div>
PackageX is the execution layer for physical AI in enterprise logistics. We enable enterprises to see, understand, and execute real-world logistics operations in real time using Vision&ndash;Language&ndash;Action intelligence.</div> 
<div></div>
<div>
We sit between systems of record (ERP, WMS, TMS) and the physical world, turning cameras, people, and automation into deterministic, auditable workflows. Rather than replacing existing systems, PackageX makes them operationally intelligent.</div> 
<div></div>
<div>
We start with inbound receiving, the highest-friction choke point in logistics, and expand across adjacent workflows, sites, and automation modes. This creates a workflow-led enterprise expansion motion that compounds inside complex operations.</div> 
<div></div>
<div>
We're a fast-growing pre-Series A stage startup in New York City with a distributed global team backed by Bullpen Capital, Pritzker Group, Sierra Ventures, Ludlow Ventures, MXV Capital, and NSV Wolf Capital.</div> 
<div></div>
<div>
What we are looking for</div>
<div>
We&rsquo;re looking for a security engineer who is serious about their craft and genuinely curious about where the field is heading. This role sits at the intersection of traditional application security and the new challenges that come with building AI-powered products. You&rsquo;ll own security end-to-end, from hardening our cloud infrastructure and reviewing code, to thinking through what it means to secure systems that use large language models. You don&rsquo;t need to have done this exact job before, but you should be the kind of engineer who stays curious, learns fast, and cares deeply about getting things right.</div> 
<div></div>
<div>
You will:
</div><ul><li>Own security across the SDLC from threat modeling during design, to security reviews during development, to vulnerability scanning in CI/CD. You&rsquo;ll use modern tooling (including AI-powered scanners where they genuinely help) to keep pace with a fast-moving engineering team.</li>
<li>Conduct vulnerability assessments and penetration tests across our web applications, APIs, and infrastructure. You&rsquo;ll identify issues before attackers do, document findings clearly, and work directly with developers to get them fixed.</li>
<li>Write and maintain security policies that engineers will actually follow, clear, practical, and grounded in how the team actually works, not copied from a compliance template.</li>
<li>Think carefully about the security risks that come with AI-powered products, such as prompt injection, sensitive data leaking through model outputs, and how to keep our LLM integrations safe for customers. This is a newer area, and you&rsquo;ll be helping us figure it out as we go.</li>
<li>Report on security posture to engineering leadership, tracking gaps, trends, and open issues in a way that helps the team prioritize and act, not just tick compliance boxes.</li>
<li>Review code for security issues and work closely with developers to fix them, building habits and processes so security feedback becomes a normal part of how the team ships, not a last-minute blocker.</li>
<li>Define and maintain security standards for how we build and deploy software, writing clear guidelines, putting automated checks in place, and making it easy for engineers to do the right thing by default.</li>
<li>Build automation that makes security work scale &mdash; whether that&rsquo;s smarter alerting, faster triage, or tooling that helps developers catch and fix issues without needing a security engineer in every conversation.</li>
<li>Participate in product and engineering design discussions &mdash; raising security concerns early, helping the team understand the risks, and finding solutions that don&rsquo;t slow down shipping.</li>
<li>Embed security into our CI/CD pipelines and development workflows &mdash; reducing the time between finding a vulnerability and getting it fixed, and making security a shared responsibility across the engineering team.</li>
<li>Keep up with how the security landscape is evolving &mdash; particularly as AI becomes a bigger part of how software is built and attacked. You&rsquo;ll bring that knowledge back to the team and help us stay ahead of new threats.</li></ul> 
<div></div>
<div>
Skills and Qualification:</div>
<ul>
<li>A degree in Computer Science, Information Security, or a related field</li>
<li>3+ years of hands-on experience in application security or security engineering.
</li><li>Proven ability to build, manage, and monitor security in production environments where reliability matters &mdash; you&rsquo;ve operated under pressure, handled incidents, and know what it takes to keep systems safe at scale.</li>
<li>Solid experience securing web applications, APIs, and cloud infrastructure &mdash; covering areas like intrusion detection, access control design, incident response, and security policy development. You know the fundamentals well and can apply them in a real product context.</li>
<li>Experience with static and dynamic code analysis, you&rsquo;ve worked with SAST and DAST tools, know their limitations, and can help developers actually act on what those tools surface rather than just generating noise.</li>
<li>Familiarity with modern cloud architectures, serverless, microservices, and API-first designs. Bonus if you&rsquo;ve thought about what it means to secure systems that call LLM APIs or handle AI-generated outputs as part of their core workflow.</li>
<li>Strong understanding of OWASP Top 10 vulnerabilities and how to defend against them. Familiarity with the OWASP Top 10 for LLMs is a plus; we&rsquo;re building AI-powered products and need someone who can think through what that means for security.</li>
<li>Good understanding of RESTful API security, authentication, authorization, rate limiting, and input validation. Our platform is API-heavy, and we need someone who can spot the common mistakes and knows how to prevent them.</li>
<li>Strong experience in penetration testing and vulnerability analysis. You can run an assessment end-to-end, write up findings that people actually read, and follow through until issues are resolved &mdash; not just hand over a report and move on.</li>
<li>Experience working with AWS and/or GCP, securing cloud infrastructure, managing IAM policies, and understanding how cloud-native services introduce their own security considerations. We run primarily on AWS.</li></ul> 
<div></div>
<div>
What can you expect from the application process?</div>
<div>
All applications will be looked at by the People team, who will reach out to shortlisted candidates. Across various interview rounds, you'll speak with the hiring manager and other functional heads. We want to have an open discussion about your work and how we can be a great fit. The process may also involve an assessment or presentation relevant to the role. You can expect an offer after three rounds of interviews. All offers are subject to satisfactory reference and background checks.</div> 

</div></div>
<div><div>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Veeam Software

<div>
 Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world&rsquo;s biggest brands.
 
 
 
 About The Role
 
 
 
 We are looking for a privacy and AI compliance professional to support regulatory research, legal analysis, and the operationalization of global privacy and AI requirements. The ideal candidate should possess strong analytical, communication, and drafting skills with an interest in evolving global privacy and AI regulations.
 
 
 
 What You&rsquo;ll Do
 
 
 
 <ul>
 <li>
 Build subject matter expertise on global data privacy and AI laws, as well as Securiti privacy modules.
 </li>
 <li>
 Maintain, update, and enhance regulatory research and legal knowledge databases,and indentify gaps and propose product improvements.
 </li>
 <li>
 Independently own regulatory interpretation for assigned jurisdictions and regulatory frameworks.
 </li>
 <li>
 Advise product, engineering, marketing, compliance, and executive teams on privacy and AI legal requirements and best practices for compliance (e.g., cookie banners, DSR/DSAR forms, compliance management, privacy notices).
 </li>
 <li>
 Draft, review, and edit high-quality knowledge center articles, solution pages, blogs, legal opinions, and marketing collateral; ensure accuracy, consistency, and compliance.
 </li>
 <li>
 Support the implementation of data privacy and AI compliance features in products by translating regulatory requirements into product specifications and collaborating with development and product teams.
 </li>
 <li>
 Actively participate in customer enablement and respond to and manage routine internal and external queries related to data privacy and the operationalization of regulatory obligations using the Securiti platform.
 </li>
 <li>
 Enhance and continuously improve regulatory intelligence databases to ensure accuracy.
 </li>
 <li>
 Collaborate with industry experts and cross-functional teams to co-author, edit, and review articles, whitepapers, and research reports.
 
 
 </li>
 </ul>
 
 What You&rsquo;ll Bring
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s or higher degree in Law (LL.B or equivalent).
 </li>
 <li>
 2-3 years of work experience in a legal, compliance, or privacy-related role
 </li>
 <li>
 Privacy or compliance certifications (e.g., CIPP) are highly preferred.
 </li>
 <li>
 Demonstrated ability to analyze and interpret complex regulations and provide clear guidance.
 </li>
 <li>
 Strong writing, editing, and communication skills for legal and non-legal audiences.
 </li>
 <li>
 Proactive, independent, and able to manage multiple priorities in a global setting.
 
 
 </li>
 </ul>
 
 What You&rsquo;ll Get
 
 
 
 <ul>
 <li>
 Competitive compensation package
 </li>
 <li>
 Comprehensive health and wellness benefits
 </li>
 <li>
 Professional development opportunities
 
 
 </li>
 </ul>
 
 Veeam Software is an equal opportunity employer
 
 and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.
 
 
 Please note that any personal data collected from you during the recruitment process will be processed in accordance with our Recruiting Privacy Notice.
 
 
 The Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to us, will be processed by us in connection with our recruitment processes.
 
 
 By applying for this position, you consent to the processing of your personal data in accordance with our Recruiting Privacy Notice.
 
 
 
 By submitting your application, you acknowledge that the information provided in your job application and any supporting documents is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification of information may result in disqualification from consideration for employment or, if discovered after employment begins, termination of employment.
 
 
 
</div>

Global Compliance Analyst

Explore 393+ Expert application product security in Islamabad this May. Find roles across top companies and apply now to boost your career.

393 expert application product security jobs In Islamabad

Expert Application & Product Security

Expert Digital Products

Expert Telco Network Security

Senior Coupa Techno-Functional Expert

Application Security Engineer

Application Security Engineer

Global Compliance Analyst