Senior Fintech Security & DevSecOps Engineer

Location

Lahore, Punjab, Pakistan

Salary

Not specified

Company

Akash pawar

Job description

Role & Company / Project Overview: Consultancy Outfit is hiring an experienced and talented Senior Fintech Security & DevSecOps Engineer to strengthen the security, reliability, and deployment infrastructure of their fintech platform and build secure fintech solutions. Key Responsibilities & Daily Duties: • Fintech Product Security: Assess security of financial workflows, e-wallets, deposits, and withdrawals. Identify risks like unauthorized transactions, privilege escalation, replay attacks, and transaction manipulation. Review authentication, authorization, role-based access, session management, and admin access. Secure payment provider integrations, APIs, webhooks, and callbacks with signature validation and access controls. Review sensitive data handling, encryption, audit trails, and secrets management. Perform threat modeling and security reviews for new features and major changes. • Application and API Security: Conduct security assessments of web apps, APIs, backend services, and mobile integrations. Review code and architecture for vulnerabilities and remediation. Implement security checks in the development lifecycle (static/dynamic testing, dependency scanning, secrets detection). Coordinate penetration testing and track closure. • DevOps and Infrastructure Security: Manage and secure cloud, servers, containers, databases, and environments. Maintain separation of dev, UAT, and production environments. Build CI/CD pipelines with automated security checks and controlled releases. Implement least-privilege access, network security, patching, and hardening. Manage secrets, certificates, encryption keys, and rotation. Set up backups, recovery, rollback mechanisms, and automation. • Monitoring and Incident Response: Implement logging, monitoring, and alerts for threats and suspicious activity. Ensure logs support investigations without exposing sensitive data. Investigate incidents, coordinate containment and recovery, and document root causes. Maintain incident response procedures and production support arrangements. • Governance and Collaboration: Maintain a security risk register with severity, ownership, and deadlines. Define security requirements and release checks with Eng, QA, Product & PM. Support security and compliance assessments and provide evidence. Guide teams on secure coding and operational security practices. Report risks, remediation progress, and infrastructure health to management. • Expected Outcomes (First 90 Days): Complete a security assessment of the product, integrations, and infrastructure; establish a remediation plan and resolve critical findings; introduce security checks into CI/CD pipelines and releases; strengthen access, secrets management, monitoring, and incident response. Required Qualifications, Skills & Experience: • Hands-on experience securing fintech, banking, payment, digital wallet, or similar financial products. • Strong knowledge of application security, API security, and financial business logic vulnerabilities. • Experience with OAuth 2.0, JWT, MFA, and role-based access control. • Experience with security testing tools (Burp Suite, OWASP ZAP, etc.). • Strong hands-on knowledge of Linux, cloud platforms (AWS/Azure), Docker, and CI/CD tools. • Knowledge of database, network, encryption, key management, and secrets management. • Ability to review code, investigate vulnerabilities, and work with developers on fixes. • Experience in monitoring, incident response, backup restoration, working with developers and QA to resolve and retest findings. • Strong documentation, prioritization, and communication skills. • Preferred Qualifications: Experience with multi-currency wallets, mass payouts, FX, or crypto custody integrations; experience with Kubernetes and Infrastructure as Code (Terraform); familiarity with PCI DSS, ISO 27001, and financial-sector security expectations; relevant certifications (CISSP, CCSP, OSCP, cloud security, or equivalent experience). Working Hours, Shifts & Location Details: • Location: Lahore, Pakistan. • Work Model: On-Site, Full-Time. • Working Hours: 10:00 AM – 06:00 PM. • Working Days: Monday to Friday. Compensation & Benefits: • Competitive compensation offered commensurate with fintech industry standards. Application Instructions: • Interested candidates can share their updated resumes via email to the recruitment email address.