Application Security & Pen Testing Specialist

About the role

The Specialist Application Security & Pen Testing role is responsible for evaluating and mitigating information‑security risks across Jazz’s applications, APIs and portals. Reporting to the Stream Head Cyber Security, the specialist safeguards software assets by designing, testing and maintaining robust security controls.

Key responsibilities

• Design, develop and maintain an application security framework for Jazz’s digital footprint.
• Identify security loopholes in custom‑built servers, web portals, dashboards and user applications.
• Conduct security testing of all services prior to production launch and perform periodic security verifications.
• Protect applications from internal and external attackers by ensuring data protection and preventing information leakage.
• Detect and remediate bugs in Android, iOS and other language‑based mobile applications.
• Analyze communication paths, host servers and IP addresses to map application interactions.
• Coordinate with internal stakeholders to balance security controls with business expectations.

Required profile

• Bachelor’s or Master’s degree in Information Security, Information Technology or a related field.
• Minimum 1 year of experience in security design and penetration testing of mobile applications and APIs, preferably in banking or telecom.
• Strong analytical abilities and capability to organise, plan and document tasks.
• Excellent stakeholder management skills.

Required skills

• In‑depth knowledge of the Software Development Life Cycle (SDLC).
• Familiarity with common programming languages used for mobile and web applications.
• Understanding of secure software development frameworks such as OWASP.
• Expertise in application, network and system security controls.
• Proficiency with API security controls and vulnerability assessment.
• Hands‑on experience with penetration‑testing tools and code‑review techniques.
• Ability to recognise, categorise and report security vulnerabilities and associated attack patterns.