Application Security Engineer

Trinity Workforce Solutions, Inc.; Makati; On-site; PHP 800,000 - 1,200,000; Full time

Benefits offered by this job

Collaborate with talented teams

Work on real-world security challenges

Career growth in a security-first culture

Job summary

A technology firm is seeking an experienced Application Security Engineer in Metro Manila, Philippines. In this role, you will embed security throughout the SDLC, conduct threat modeling, and perform SAST and DAST. The ideal candidate should have strong experience in web and API penetration testing, solid knowledge of application security principles, and excellent communication skills. Join a team tackling serious security challenges and contribute to secure development practices.

Qualifications

• Strong hands-on experience in Threat Modeling and SAST.
• Deep understanding of application and API security concepts.
• Excellent communication skills to translate risks into guidance.

Responsibilities

• Perform Threat Modeling, Secure Architecture Reviews, and SAST.
• Conduct Web Application and API Penetration Testing.
• Embed security controls in the Software Development Life Cycle.

Skills

Threat Modeling

Static Application Security Testing (SAST)

API Security Concepts

Dynamic Application Security Testing (DAST)

Web and API Penetration Testing

OWASP Top 10 Knowledge

Checkmarx

Fortify

Burp Suite

Tools

Veracode

Semgrep

OWASP ZAP

Acunetix

Job description

We’re currently looking for a highly skilled Application Security Engineer to join our team and help build secure, resilient, and scalable applications across our technology landscape.

If you are passionate about embedding security into the software development lifecycle and enjoy working closely with developers and architects, this role is for you.

Role: Application Security Engineer

Required Technical Skills

• Static Application Security Testing (SAST)
• Threat Modeling

What You’ll Do

• Perform Threat Modeling, Secure Architecture Reviews, and SAST as primary responsibilities
• Conduct Web Application and API Penetration Testing (secondary responsibilities)
• Execute and support Dynamic Application Security Testing (DAST) activities
• Embed security controls and best practices throughout the Software Development Life Cycle (SDLC)
• Partner closely with developers, architects, and leadership to deliver practical, risk-based security solutions
• Document security findings clearly and provide developer-friendly remediation guidance

Must-Have Skills & Experience

• Strong hands-on experience in Threat Modeling, Secure Architecture Reviews, and SAST
• Deep understanding of application and API security concepts
• Proficiency with SAST tools such as Checkmarx, Fortify, Veracode, Semgrep
• Working knowledge of DAST tools including Burp Suite, OWASP ZAP, Acunetix
• Experience in Web and API penetration testing
• Solid understanding of OWASP Top 10 and OWASP API Top 10
• Excellent communication skills with the ability to translate security risks into actionable guidance
• Strong collaboration skills and a risk-based security mindset
• Solid documentation and reporting capabilities

Good-to-Have

• Advanced Web Application Penetration Testing
• Advanced API Penetration Testing

Why Join Us

• Work on real-world security challenges at application and API scale
• Collaborate with talented engineering and architecture teams
• Influence secure design decisions early in the SDLC
• Grow your career in a security-first engineering culture