App Security & DevSecOps Advocate

Open iT, Inc.; Lucena; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Open iT, Inc. seeks an Application Security Analyst to ensure products across on‑premises, web, and cloud are built with security in mind. You will work with developers to embed security into the SDLC, run vulnerability assessments, and support compliance initiatives.

Key duties include evaluating security tools, guiding secure coding practices, and reporting security findings to internal teams and customers. The role emphasizes collaboration with DevOps, testers, and security staff.

Qualifications

• Good understanding of application and web security fundamentals.
• Familiarity with OWASP Top 10 vulnerabilities.
• Basic knowledge of vulnerability assessment and security testing tools.
• Understanding of SDLC and secure coding practices.
• Familiarity with DevSecOps concepts and CI/CD security.
• Ability to analyze findings and distinguish real risks from false positives.

Responsibilities

• Research, evaluate, and recommend security tools and practices for development teams.
• Conduct vulnerability assessments and security testing across desktop, web, and cloud apps.
• Support secure coding and SSDLC integration in the development lifecycle.
• Contribute to security compliance initiatives (ISO 27001, SOC 2, GDPR).
• Collaborate with security, development, testing, and DevOps to align efforts with policies.
• Embed security into CI/CD pipelines and deployment processes.
• Monitor threats and communicate updates to the team.
• Provide security awareness and guidance to developers.
• Respond to customer and internal security inquiries with product security input.

Skills

App & Web Security

OWASP Top 10

Vulnerability Assessment

Secure SDLC

DevSecOps

CI/CD Pipelines

Risk Analysis

Communication Skills

Team Collaboration

Continuous Learning

Tools

Burp Suite

OWASP ZAP

Nessus

Nmap

SAST/DAST tools

Job description

Open iT, Inc. seeks an Application Security Analyst to ensure products across on‑premises, web, and cloud are built with security in mind. You will work with developers to embed security into the SDLC, run vulnerability assessments, and support compliance initiatives.

Key duties include evaluating security tools, guiding secure coding practices, and reporting security findings to internal teams and customers. The role emphasizes collaboration with DevOps, testers, and security staff.