Senior Application Security Engineer

Manulife

Quezon City, Philippines
Hybrid
Dynamic application security testing (dast)
Application security engineering
Secrets management and remediation
Provide strategic leadership for the organization’s Dynamic Application Security Testing (DAST) program, including governance, oversight, and continuous improvement

Job Summary

  • Provide strategic leadership for the organization’s Dynamic Application Security Testing (DAST) program, including governance, oversight, and continuous improvement.
  • Lead the enterprise secrets scanning and secrets management program, including detection, classification, and preventive controls.
  • Collaborate closely with Engineering, DevOps, Product, and Risk teams to improve security processes, enhance tool integrations, and support secure development practices.

Matching Summary

Provide strategic leadership for the organization’s Dynamic Application Security Testing (DAST) program, including governance, oversight, and continuous improvement.

Skills & Requirements

Must-have

  • Dynamic Application Security Testing (DAST)
  • Application Security Engineering
  • Secrets Management and Remediation
  • scripting (Python, Bash, PowerShell)
  • web application security principles
  • OWASP Top 10
  • manual penetration testing

Nice-to-have

  • CI/CD pipeline integration
  • containerized environments
  • cloud platforms
  • microservices architectures
  • enterprise secrets management platforms
  • GitOps, DevSecOps, SRE practices
  • secrets detection tools

Key Requirements

  • Extensive hands-on DAST tools experience
  • Strong scripting skills
  • Deep understanding of web application security
  • Demonstrated manual penetration testing experience
  • Excellent communication skills
  • Proven documentation and process improvement experience
  • Amenable to work in Quezon City
  • Amenable to work in a hybrid set-up
  • Amenable to work in a mid shift schedule

Work Rights

Not specified

Tailored Resume

Cover Letter