Senior Application Security Engineer
Manulife
This position requires local presence. Please view similar jobs below.
We are looking for a highly skilled Senior Application Security Engineer to lead our Dynamic Application Security Testing (DAST) and Application Security Engineering Secrets Management and Remediation. In this role, you will shape the strategy, governance, and continuous improvement of security testing capabilities. You will collaborate with Engineering and DevOps teams to integrate security testing into the SDLC, assess and prioritize vulnerabilities, and guide remediation efforts. Success in this position requires strong technical depth in DAST, penetration testing, Application Security Engineering RapidLab/Secrets Management and Remediation, and automation, paired with excellent communication and leadership skills. Position Responsibilities Dynamic Application Security Testing (DAST)
- Provide strategic leadership for the organization's Dynamic Application Security Testing (DAST) program, including governance, oversight, and continuous improvement.
- Manage end-to-end onboarding of applications into the DAST program, ensuring appropriate scoping, configuration, and alignment with security requirements.
- Configure, execute, and optimize automated DAST scans to maximize coverage while minimizing false positives.
- Conduct manual DAST assessments for complex, high-risk, or non-standard application environments.
- Serve as a technical escalation point for DAST tooling, configuration issues, integration needs, and troubleshooting activities.
- Review, validate, and triage DAST results, ensuring clear prioritization and effective communication of findings to engineering stakeholders.
- Maintain and enhance documentation for DAST processes, standards, operational procedures, and best practices.
- Develop and maintain automation scripts (e.g., Python, Bash, PowerShell) to streamline DAST workflows, reporting, onboarding, and operational tasks.
- Integrate automated DAST capabilities into CI/CD pipelines to support continuous security testing.
- Identify new opportunities for automation and process optimization to drive program efficiency and scalability.
- Lead the enterprise secrets scanning and secrets management program, including detection, classification, and preventive controls.
- Partner with engineering and IAM to implement secure secrets storage solutions (vaulting, rotation, lifecycle management).
- Ensure timely revocation, rotation, or replacement of exposed secrets in alignment with risk policies and operational requirements.
- Provide strategic leadership in driving the enterprise secrets remediation program in partnership with the Application Security and broader Cyber Assessment teams.
- Represent the program in key project meetings, including discovery sessions, solution architecture reviews, and project checkpoints to align technical direction with business and security objectives.
- Balance technical solutions with business needs, leveraging design thinking, stakeholder engagement, and effective communication to ensure seamless adoption.
- Apply advanced problemsolving skills throughout the secure SDLC to continuously strengthen endtoend processes and reduce recurring secretrelated risks.
- Support a culture of continuous learning, mentoring team members and promoting knowledge sharing across successes, failures, and evolving best practices.
- Collaborate closely with Engineering, DevOps, Product, and Risk teams to improve security processes, enhance tool integrations, and support secure development practices.
- Contribute to incident response, change management, and operational troubleshooting as they relate to DAST or broader application security controls.
- Proactively assess the DAST program for gaps, risks, and areas of improvement, and lead initiatives to strengthen overall governance.
- Maintain clear, comprehensive documentation, including playbooks, procedures, workflows, and operational guidelines.
- Able to perform penetration testing activities on applications and related components when required.
- Capable of producing clear reports that outline issues and recommend improvements.
- Collaborate effectively with technical teams to support remediation efforts and promote secure development practices.
- Extensive hands-on experience with DAST tools, methodologies, and configuration best practices.
- Strong scripting skills (e.g., Python, Bash, PowerShell) for automation and operational efficiency.
- Deep understanding of web application security principles, the OWASP Top 10, and common attack patterns.
- Demonstrated experience performing manual penetration testing.
- Excellent communication skills with the ability to collaborate effectively across technical and non-technical teams.
- Proven experience developing documentation and driving structured process improvements.
- Amenable to work in UP Ayala Technohub (Quezon City)
- Amenable to work in a hybrid set-up (3x onsite per week)
- Amenable to work in a mid shift schedule
- Experience integrating DAST capabilities into CI/CD pipelines and development workflows.
- Knowledge of containerized environments, cloud platforms, and microservices architectures.
- Relevant industry certifications (e.g., OSCP, OSWE, GWAPT, CEH, GIAC).
- Experience with secure SDLC frameworks or application security governance programs.
- Background mentoring or leading team members.
- Exposure to advanced penetration testing techniques, tools, or methodologies beyond baseline requirements.
- Handson experience with enterprise secrets management platforms, including Azure Key Vault, HashiCorp Vault, AWS Secrets Manager, or equivalent solutions.
- Familiarity with GitOps, DevSecOps, and SRE practices related to secrets handling.
- Knowledge of secrets detection tools and techniques (e.g., GitLeaks, TruffleHog, GitGuardian, GHAS secret scanning).
- We'll empower you to learn and grow the career you want.
- We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
- As part of our global team, we'll support you in shaping the future you want to see.
Vacancy posted 20 days ago
Similar jobs that could be interesting for youBased on the Senior Application Security Engineer in Quezon City vacancy
775000 $ per day
...CV must include your photo to ensure the accuracy of your application. Who we are: Accenture in the Philippines is a pioneer... ...certifications. Role Overview We are looking for Security Engineers to design, implement, and manage security monitoring and...775000 $ per day
...or CV must include your photo to ensure the accuracy of your application. Who we are: Accenture in the Philippines is a pioneer... ...certifications. Why This Role Matters Join a high-impact SAP Security team supporting enterprise-scale SAP environments. You’ll work...- ...technology-enabled organization, is seeking an experienced Application Engineer – Workday Payroll to support the configuration, integration,... ...Management, Absence Management, Time Tracking, Integration, Security, and Data Conversion. The role is responsible for supporting...
- ...concept on every system that will be implemented in SLMC. # Support in integration between different systems. # Support in application development and implementation # Manage and coordinate 3rd party vendors. Planning: # Participate in...
- ...technology. Teamified currently has 200+ engineers, testers, product managers etc. working across... ...complex payment workflows through a secure, API-driven payment platform. Their solutions... ...Role We are seeking an experienced Senior Data Engineer to design, build, and scale...
775000 $ per day
...service identifying and solving issues within multiple components of critical business systems. Summary: As an Application Support Engineer, you will be responsible for providing a dynamic service identifying and solving issues within multiple components of...- ...Matter. Job Description We are currently seeking a Security Manager to join our vibrant team. At RHG, we are in search of... ...Apply now and let’s make every moment matter. We welcome applicants from all backgrounds, abilities, and experiences . If you need...
775000 $ per day
Apply security skills to design, build and protect enterprise systems, applications, data, assets, and people. Provide services to safeguard information, infrastructures... ...threats. Summary: As a Security Engineer, you will engage in a variety of tasks aimed...- We are Hiring for IT Cloud Security Engineering | Earn up to Php 100,000 + Peripherals Provided | Online Process Only - At least 2-5 years... ...for designing, building and protecting enterprise systems application, data and infrastructure. • Safeguard company information,...
JK Network Services
Quezon Citymore than 2 months ago 775000 $ per day
Deliver and manage security services across client environments to ensure protection, compliance, and operational resilience.... ...Technical Skills: - Required Skill: Expert proficiency in Malware Engineering Operations. - Strong understanding of threat analysis and incident...775000 $ per day
Deliver and manage security services across client environments to ensure protection, compliance, and operational resilience.... ...Technical Skills: - Required Skill: Expert proficiency in Malware Engineering Operations. - Strong understanding of threat analysis and incident...- ...a path to financial freedom. About the Role The Senior Risk Analytics Engineer serves as the data engineering and analytics backbone of... ...Risk; automate recurring computations and tracking where applicable. Support periodic risk scanning routines across Slack,...
775000 $ per day
Deliver and manage security services across client environments to ensure protection, compliance, and operational resilience. Summary: As a Security Managed Services Practitioner, you will deliver and manage security services across client environments to ensure...1 $ per day
...Location: Work in MDC100, Eastwood (Night Shift!) As an Senior Systems Engineer... You'll be responsible for providing comprehensive... ...monitor various IT systems, including servers, networks, and applications, to identify and address potential issues before they...- ...WE’RE HIRING FOR AN IT INFRASTRUCTURE ENGINEER AT PH! We’re a fast-growing engineering... ...systems. We’re looking for a Senior Infrastructure Engineer who can take full... ...VLANs, routing) to improve performance, security, and overall infrastructure observability...
775000 $ per day
Deliver and manage security services across client environments to ensure protection, compliance, and operational resilience. Summary: As a Security Managed Services Practitioner, you will deliver and manage security services across client environments to ensure...775000 $ per day
Deliver and manage security services across client environments to ensure protection, compliance, and operational resilience. Summary: As a Security Delivery Lead, you will be responsible for overseeing the implementation and delivery of Security Services projects...- Design of Residential, Commercial Buildings and Industrial Facilities Autocad Drafting Preparation of the followings: Single Line Diagrams Power and Lighting Layouts Electrical Load Calculations
775000 $ per day
...and succeed in the digital age. Summary: As SAP Basis Application Developer, you will be responsible for designing, building,... ...candidate will possess a strong educational background in software engineering or a related field, along with a proven track record of...- ...Eastwood (Night Shift!) As a L3 IT Support Engineer, work with our MSP Partners: As a... ...Technical Profile At least 5 years in a senior with advanced technical expertise... ...Systems & Network Management Maintain and secure network infrastructure including firewalls...
- ...Description Role Overview As a Data Engineer, you will design, build, and optimize... ...3. Production Database Optimization & Security Implement architectural safeguards (e... ...commensurate to the candidate's experience, qualifications , and applicable skillsets.
80000 - 100000 Php
...our clients know it. They're asking for engineers who don't just use AI tools occasionally... ...doing this work. The Role: This is a senior individual contributor role. You will... ...the architectural shortcuts, the subtle security gaps, the logic that looks right but isn...- ...is seeking an experienced Senior Software Developer to lead... ...scalable software web and mobile applications. Lead and mentor junior... ...with product managers, QA engineers, and other stakeholders to define... ...CI/CD) processes. Ensure security best practices and...
775000 $ per day
...adherence to Accenture’s process of Identity Verification, your resume or CV must include your photo to ensure the accuracy of your application. Who we are: Accenture in the Philippines is a pioneer in Accenture’s global delivery network. Over the past 30 years, we...775000 $ per day
...Job Summary: Working in the Information Security group as part of the Client Data Protection Opportunity Support team based in the Philippines the Security Delivery Associate Manager will manage requirements specified in security contracts, as well as work with Accenture...775000 $ per day
Deliver and manage security services across client environments to ensure protection, compliance, and operational resilience. Summary: As a Security Managed Services Practitioner, you will deliver and manage security services across client environments to ensure...- ...for a motivated and skilled Electrical Engineer to help ensure efficient, safe, and reliable... ...communication and reporting skills Applicants near Bugallon, Pangasinan, are highly... ...tier global talent in emerging markets. Secure legal employment through our Employer of...
- ...progressive accounting experience, with at least 2 years in a senior role. ~ Strong background in accounting operations, reporting... ...and supported. Dynamic, startup-like experience within the security of a fast-growing, 20-year old Swiss-based company. The opportunity...
775000 $ per day
...Atlassian Migration Engineer: Lead end-to-end migration projects for Atlassian tools... ...lessons learned Ensure compliance with security, governance, and industry standards... ...Integrate Atlassian tools with third-party applications and plugins Develop and enforce...- ...JOB SUMMARY: A Senior E-Commerce Associate leads in the development of annual brand plans for relevant market/s and manages the execution... ...purposes, and comply with its reporting obligations under applicable laws, rules, and regulations. You as the data subject...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior Application Security Engineer. Be the first to apply!
