Application Security Enablement Lead

Manulife IT Delivery Center Asia Inc.; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Manulife IT Delivery Center Asia Inc. is seeking an experienced application security engineer to drive secure development practices across the Asia portfolio.

You will embed secure-by-design principles, perform threat modeling, and guide engineering teams to align with enterprise security standards throughout the SDLC. The role focuses on vulnerability assessment, remediation prioritization, and SME support, partnering with architects, product owners, and developers to strengthen the security

Qualifications

• Minimum 5+ years in application security or software development roles with a focus on secure coding and DevSecOps.
• Strong understanding of application security principles, SDLC, and CI/CD pipelines.
• Strong understanding of application penetration testing
• Knowledge of secure coding standards and frameworks (e.g., OWASP Top 10, NIST).
• Excellent collaboration and communication skills to engage developers and stakeholders.

Responsibilities

• Help drive adoption of enterprise application security standards across applications, platforms, and cloud environments.
• Enable automation for vulnerability detection, remediation, exception review and reporting to improve efficiency and consistency.
• Provide actionable, risk-based technical guidance and training to developers on secure design and coding standards (e.g., OWASP).
• Partner with architects, product owners, and development teams during design and planning phases to embed secure-by-design principles.
• Conduct and validate application security testing (automated and manual), including intake and validation of findings from external penetration tests and bug bounty programs.

Skills

Application security

Secure coding

DevSecOps

CI/CD

Communication

Tools

SAST

DAST

SCA

Container security

Automation frameworks

Secrets management

Job description

Manulife IT Delivery Center Asia Inc. is seeking an experienced application security engineer to drive secure development practices across the Asia portfolio.

You will embed secure-by-design principles, perform threat modeling, and guide engineering teams to align with enterprise security standards throughout the SDLC. The role focuses on vulnerability assessment, remediation prioritization, and SME support, partnering with architects, product owners, and developers to strengthen the security