Application Security Engineer

Career Connect; Makati; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Career Connect is seeking an Application Security Engineer to assess security for new applications and systems, and to collaborate with the R&D team to implement a robust security framework. You will ensure all deployments meet global security standards and protect the company from threats.

You will identify and address vulnerabilities, implement security solutions, and ensure compliance with industry standards across all applications and systems.

Qualifications

• Bachelor’s degree in CS/Engineering or related field is required.
• Minimum 5 years in IT with 2 years in information security and governance.
• Experience with banking and digital transformation projects preferred.
• Strong problem-solving, leadership, and lifecycle knowledge.
• Knowledge of regulatory issues and technology trends.

Responsibilities

• Conduct security risk and threat assessments for new apps and systems.
• Run vulnerability scans, penetration tests, and exploit code where safe.
• Recommend and implement remediation to address vulnerabilities.
• Collaborate with development to integrate security into SDLC.
• Maintain records of vulnerabilities and remediation actions.
• Provide information security training to users.

Skills

Security risk assessments

Vulnerability testing

Security remediation

Security framework development

Documentation & reporting

Security training

Regulatory compliance

Risk management

Communication

Collaboration

Education

Bachelor’s degree in Computer Science, Engineering, or related field

Tools

SAST tools

Penetration testing tools

Job description

The Application Security Engineer is responsible for assessing the security of new applications and systems, conducting security assessments, and collaborating with the research and development team to implement a robust security framework. The role ensures that all applications deployed meet global security standards, protecting the company from potential threats.

The Application Security Engineer is accountable for maintaining the security of all applications and systems deployed within the company. This includes identifying and addressing vulnerabilities, implementing security solutions, and ensuring compliance

with global security standards.

DUTIES AND RESPONSIBILITIES

• Security Risk Assessments: Conduct security risk and threat assessments for new applications and systems.
• Vulnerability Testing: Run vulnerability scans, penetration testing, and exploit code execution to identify potential risks.
• Security Remediation: Recommend and implement technical solutions to address vulnerabilities identified during assessments.
• Security Framework Development: Collaborate with the development team to integrate security protocols within the software development lifecycle (SDLC)
• Documentation & Reporting: Maintain updated records of security vulnerabilities and remediation actions.
• Training: Conduct information security training to educate users on protecting company data against potential threats.
• Adhere to quality and compliance standards as part of our Information Security Management System. This includes following documented processes, participating in continuous improvement, and maintaining accurate records. Each team member is responsible for supporting a safe, efficient, and customer-focused work environment.

Requirements

• Bachelor’s degree in Computer Science, Engineering, or related field.
• 5 years in IT, with 2 years in information security, focusing on IT governance, network, or application security.
• Problem-solving mindset, project management, product and software development lifecycles, leadership, and experience in banking and digital transformation.
• Knowledge of advanced business planning, regulatory issues, and technology trends.
• Technical
• Vulnerability Management: Expertise in conducting security assessments, running vulnerability scans, and addressing identified risks.
• Penetration Testing: Proficient in performing penetration tests and executing exploit code to identify potential vulnerabilities.
• Security Framework Implementation: Strong capability in integrating security protocols into the software development lifecycle (SDLC).
• Security Tools: Knowledge of SAST (Static Application Security Testing) and other security tools to detect and remediate vulnerabilities.
• Behavioral
• Problem-Solving: Analytical and proactive in addressing security issues and vulnerabilities.
• Communication: Effective in liaising with development teams and stakeholders to ensure security compliance.
• Attention to Detail: High level of accuracy in identifying and addressing security flaws and maintaining security documentation.
• Collaboration: Ability to work with cross-functional teams to implement security best practices.