Application Security Engineer

GCash; Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Career growth opportunities

Flexible compensation and benefits package

Job summary

GCash in Manila is seeking an experienced Application Security professional to enhance the security of its applications. You will conduct security testing, automate security checks, and provide training to developers. We offer opportunities for career growth within the #1 FinTech company in the Philippines.

The ideal candidate holds a Bachelor's degree in Computer Science or Information Security and has 5+ years of relevant experience. Enjoy a flexible compensation and benefits package in a dynamic environment.

Qualifications

• 5+ years in application security or software development with a strong focus on security.
• Proven experience with SAST, DAST, and dependency scanning tools.

Responsibilities

• Conduct static and dynamic security testing and provide actionable remediation recommendations.
• Collaborate with developers and DevOps teams to embed security into workflows.
• Track and remediate vulnerabilities in applications and dependencies.

Skills

Proficiency in programming languages

Deep understanding of OWASP Top 10

Strong analytical and problem-solving abilities

Education

Bachelor’s degree in Computer Science or Information Security

Tools

SAST tools

DAST tools

CI/CD tools

Job description

Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today!

Key Responsibilities

• Secure Development Practices:
  • Conduct static (SAST) and dynamic (DAST) security testing and provide actionable remediation recommendations to developers.
  • Develop and maintain secure coding standards and guidelines.
  • Perform manual code reviews for high-risk applications or critical features.
• Tooling and Automation:
  • Configure and manage application security tools.
  • Automate security testing within CI/CD pipelines to ensure scalability and consistency.
• Collaboration and Training:
  • Collaborate with developers and DevOps teams to embed security into workflows.
  • Provide training and guidance to developers on secure coding practices.
• Vulnerability Management:
  • Track, prioritize, and help remediate vulnerabilities in applications and dependencies.
  • Research and evaluate emerging threats and technologies to enhance application security.
• Incident Support:
  • Support incident response efforts by analyzing application-level vulnerabilities.
  • Provide expertise during security incidents related to applications.

Qualifications

• Education: Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• Experience:
  • 5+ years in application security or software development with a strong focus on security.
  • Proven experience with SAST, DAST, and dependency scanning tools.
• Technical Skills:
  • Proficiency in programming languages (e.g., Python, Java, JavaScript).
  • Deep understanding of OWASP Top 10, secure design principles, and common attack vectors.
  • Experience in integrating security tools into CI/CD pipelines.
  • Knowledge of cloud-native application security and containerized environments.
• Soft Skills:
  • Strong analytical and problem-solving abilities.
  • Effective communication skills to translate technical security issues for diverse audiences.

What We Offer

Opportunity for career growth and development in the #1 FinTech company in the country. Working with a dynamic and highly collaborative team who want to change the game. A company that values their people with highly competitive and flexible compensation and benefits package.