Security Software Engineer (Onsite, Lahore)

About the role

We are looking for a Security Software Engineer to join our Lahore team. You will work on building and hardening backend applications while actively remediating security vulnerabilities discovered in production.

Key responsibilities

• Analyze, prioritize, and remediate security findings from internal assessments and bug bounty reports.
• Develop secure, scalable backend code using Node.js, Python, Go, Java or similar technologies.
• Review and refactor existing codebases to eliminate security weaknesses.
• Implement best practices for authentication, authorization, API security, encryption and data protection.
• Conduct secure code reviews and suggest architectural improvements.
• Collaborate with Engineering, DevOps and QA to embed security into the SDLC and CI/CD pipelines.
• Document vulnerabilities, remediation steps and preventive measures.

Required profile

• 1–2 years of software development experience with a focus on application security.
• Hands‑on coding background and proven experience fixing production vulnerabilities.
• Strong understanding of the OWASP Top 10 and secure development principles.
• Familiarity with bug bounty platforms (e.g., HackerOne, Bugcrowd) and vulnerability disclosure workflows.
• Knowledge of DevSecOps, CI/CD security integrations and cloud security practices.

Required skills

• Backend development: Node.js, Python, Go, Java (or similar).
• Authentication, session management, authorization, API security.
• Static and dynamic application security testing (SAST/DAST) tools.
• Bug bounty program handling and vulnerability disclosure.
• Threat modeling and secure architecture design.
• Security monitoring and automated testing tools.