Application Security Enablement Engineer DevSecOps (Hybrid)

Manulife; Makati; Hybrid; PHP 2,000,000 - 3,200,000; Full time

Job summary

Manulife Asia invites a senior security leader to own application security across Asia markets, bridging global strategy with regional execution in SDLC, CI/CD, and DevSecOps. You will drive vulnerability management, threat modeling, and security testing, collaborating with architects and engineers to strengthen API, container, and cloud security practices.

This hybrid-facing role offers Manila-area opportunities to shape secure software enablement at scale, guiding teams and elevating security

Qualifications

• Minimum 5+ years in application security or secure software development.
• Strong knowledge of SDLC, CI/CD, and secure coding standards.
• Experience with application penetration testing.
• Certifications such as OSCP or CISSP preferred.
• Familiarity with security tooling and automation.

Responsibilities

• Drive adoption of enterprise application security standards across apps, platforms, and cloud environments.
• Enable automation for vulnerability detection, remediation, exception review and reporting.
• Provide actionable guidance and training to developers on secure design and coding standards.
• Partner with architects, product owners, and development teams during design and planning phases to embed secure-by-design principles.
• Conduct and validate application security testing and manage findings from external assessments.

Skills

Application security

Secure coding

DevSecOps

SDLC

CI/CD pipelines

Communication

Education

Security certifications (OSCP, CISSP)

Tools

SAST

DAST

SCA

Container security

WAF/NAC

Kubernetes

IaC security

Job description

Manulife Asia invites a senior security leader to own application security across Asia markets, bridging global strategy with regional execution in SDLC, CI/CD, and DevSecOps. You will drive vulnerability management, threat modeling, and security testing, collaborating with architects and engineers to strengthen API, container, and cloud security practices.

This hybrid-facing role offers Manila-area opportunities to shape secure software enablement at scale, guiding teams and elevating security