Application Security Enablement Engineer

PAN ASIA HR CONSULTING PH INC.; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

PAN ASIA HR CONSULTING PH INC. is seeking an experienced Application Security Enablement Engineer in the Philippines.

The role drives adoption of security standards across applications, development platforms, and cloud environments, integrating security into SDLC and CI/CD pipelines. You will conduct threat modeling, support vulnerability management, perform security testing, and provide guidance on secure coding practices (OWASP Top 10, NIST).

Qualifications

• Minimum of 5 years in Application Security or related roles.
• Strong knowledge of Secure SDLC and DevSecOps practices.
• Hands-on app pen testing and vulnerability assessment experience.
• Secure coding standards, OWASP Top 10 and NIST familiarity.
• Experience integrating security tools into CI/CD pipelines.

Responsibilities

• Drive enterprise app security standards across apps, platforms, and clouds.
• Integrate security into SDLC and CI/CD pipelines.
• Conduct threat modeling for new apps and major changes.
• Support vulnerability management including triage and remediation.
• Perform and validate security testing (automated and manual).
• Review findings from external tests and bug bounty programs.
• Provide guidance on secure coding practices and frameworks.
• Automate vulnerability detection, remediation tracking, and reporting.
• Support SAST, DAST, SCA, secrets management, container security.
• Collaborate with developers, architects, and security teams on secure-by-design.

Skills

Application Security

Secure SDLC

DevSecOps

Penetration Testing

Secure Coding

OWASP Top 10

NIST

CI/CD Integration

Vulnerability Mgmt

Threat Modeling

Remediation

SAST

DAST

SCA

Secrets Management

Container Security

WAF

Kubernetes

Docker

IaC Security

Tools

Kubernetes

Docker

SAST

DAST

SCA

Secrets Management

WAF

IaC security

Job description

About the role

We are looking for an experienced Application Security Enablement Engineer to drive the adoption of application security standards across enterprise applications, development platforms, and cloud environments. The successful candidate will work closely with software developers, architects, and engineering teams to integrate security practices into the Software Development Life Cycle (SDLC) and CI/CD pipelines. This role focuses on vulnerability management, threat modeling, secure coding, application security testing, and DevSecOps automation to strengthen the organization's overall security posture.

Key responsibilities

• Drive the adoption of enterprise application security standards across applications, platforms, and cloud environments.

• Integrate security practices into the Software Development Life Cycle (SDLC) and CI/CD pipelines.

• Conduct application-level and architecture-level Threat Modeling for new applications and major system enhancements.

• Support vulnerability management, including vulnerability assessment, triage, remediation, exception handling, and reporting.

• Perform and validate application security testing, including automated and manual penetration testing.

• Review and validate security findings from external penetration tests and bug bounty programs.

• Provide technical guidance to developers on secure coding practices and security frameworks, particularly OWASP.

• Automate vulnerability detection, remediation tracking, and security reporting.

• Support the implementation and improvement of SAST, DAST, SCA, secrets management, and container security solutions.

• Collaborate with application developers, architects, product owners, and global security teams to implement secure-by-design principles.

About you

• Minimum of 5 years of experience in Application Security, Software Development, or related Information Security roles.

• Strong knowledge of Application Security principles, Secure SDLC, and DevSecOps practices.

• Hands-on experience with application penetration testing and vulnerability assessment.

• Strong understanding of secure coding standards and frameworks, particularly OWASP Top 10 and NIST.

• Experience integrating security tools into CI/CD pipelines.

• Knowledge of vulnerability management, threat modeling, and security remediation processes.

• Excellent communication and collaboration skills, with the ability to work closely with developers and technical stakeholders.

• Hands-on experience with security tools and technologies such as SAST, DAST, SCA, Secrets Management, Container Security, and WAF.

• Exposure to API Security, Kubernetes, Docker, and container platforms.

• Knowledge of Infrastructure as Code (IaC) security and hybrid cloud environments.