Application Security Analyst - DevSecOps & Vulnerabilities

PERSOL; Taytay; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Security-focused role

Job summary

PERSOL is seeking an experienced Application Security professional in the Philippines to conduct security reviews across applications, APIs, and development projects. The role requires hands-on work with SAST, SCA, and DAST tools to assess vulnerabilities and their business impact.

You will collaborate with Dev and DevOps teams to remediate findings, support secure SDLC and CI/CD security controls, and perform risk assessments for new systems and cloud environments.

Qualifications

• Degree or diploma in Cybersecurity, IT, Computer Science or a related discipline.
• 3–5 years of relevant experience in Application Security, Cybersecurity, Vulnerability Management or DevSecOps.
• Hands-on experience with SAST, SCA, DAST tools and vulnerability assessment.
• Good knowledge of OWASP Top 10, web application security and API security.
• Ability to assess exploitability, business impact and remediation requirements.
• Understanding of Secure SDLC, DevSecOps and CI/CD security controls.
• Knowledge of cloud security, preferably AWS.
• Experience in security risk assessments and risk acceptance is preferred.
• Relevant cybersecurity certifications are advantageous.
• Strong analytical, documentation and communication skills with technical and non-technical teams.

Responsibilities

• Conduct application security reviews and assessments across applications, APIs and development projects.
• Analyze findings from SAST, SCA and DAST tools to determine vulnerability applicability, exploitability and business impact.
• Assess application and dependency vulnerabilities, including reachable code paths, false positives and non-applicable findings.
• Review security waiver and risk acceptance requests, including justifications and compensating controls.
• Collaborate with development and DevOps teams to remediate vulnerabilities and track closure.
• Support integration of security controls into DevSecOps practices and CI/CD pipelines, including security scanning and gates.
• Conduct or support security risk assessments for new applications, system changes, APIs and cloud environments.
• Maintain security assessment reports, vulnerability records and risk documentation.

Skills

Analytical skills

Documentation

Communication skills

Team collaboration

Education

Cybersecurity/IT/CS degree or diploma

Tools

SAST

SCA

DAST

Job description

PERSOL is seeking an experienced Application Security professional in the Philippines to conduct security reviews across applications, APIs, and development projects. The role requires hands-on work with SAST, SCA, and DAST tools to assess vulnerabilities and their business impact.

You will collaborate with Dev and DevOps teams to remediate findings, support secure SDLC and CI/CD security controls, and perform risk assessments for new systems and cloud environments.