Application Security Engineer

GCash; Metro Manila; Presencial; PHP 1.500.000 - 2.100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career growth

Competitive compensation

Flexible benefits

Descripción de la vacante

GCash is seeking an experienced security-focused engineer to advance secure development practices across our applications in the Philippines. Your role will drive SAST/DAST, dependency scanning, and secure coding standards while collaborating with developers and DevOps teams to embed security into CI/CD pipelines.

You will also conduct code reviews for high-risk features, stay ahead of emerging threats, and train engineers on secure coding practices to maintain our leading FinTech platform.

Formación

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 5+ years in application security or software development with a strong focus on security.
• Proficiency in Python, Java, and JavaScript; strong security testing tooling experience.

Responsabilidades

• Perform SAST/DAST and dependency scanning; provide remediation guidance.
• Develop and maintain secure coding standards and guidelines.
• Conduct manual code reviews for high-risk applications or critical features.
• Configure and manage application security tools; automate security testing in CI/CD pipelines.
• Collaborate with developers and DevOps to embed security into workflows; provide training on secure coding.

Conocimientos

Python

Java

JavaScript

Security testing

CI/CD integration

Cloud-native security

Container security

OWASP Top 10

Strong communication

Analytical thinking

Educación

Bachelor's degree in Computer Science or Information Security

Herramientas

SAST

DAST

Dependency scanning

Descripción del empleo

Job Description:

Do you want to take the first step in making Filipinos' lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today!

Key Responsibilities

• Secure Development Practices:
• Conduct static (SAST) and dynamic (DAST) security testing and provide actionable remediation recommendations to developers.
• Develop and maintain secure coding standards and guidelines.
• Perform manual code reviews for high-risk applications or critical features.
• Tooling and Automation:
• Configure and manage application security tools
• Automate security testing within CI/CD pipelines to ensure scalability and consistency.
• Collaboration and Training:
• Collaborate with developers and DevOps teams to embed security into workflows.
• Provide training and guidance to developers on secure coding practices.
• Vulnerability Management:
• Track, prioritize, and help remediate vulnerabilities in applications and dependencies.
• Research and evaluate emerging threats and technologies to enhance application security.
• Incident Support:
• Support incident response efforts by analyzing application-level vulnerabilities.
• Provide expertise during security incidents related to applications.

Qualifications

• Education: Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• Experience:
  • 5+ years in application security or software development with a strong focus on security.
  • Proven experience with SAST, DAST, and dependency scanning tools.
• Technical Skills:
  • Proficiency in programming languages (e.g., Python, Java, JavaScript).
  • Deep understanding of OWASP Top 10, secure design principles, and common attack vectors.
  • Experience in integrating security tools into CI/CD pipelines.
  • Knowledge of cloud-native application security and containerized environments.
• Soft Skills:
  • Strong analytical and problem-solving abilities.
  • Effective communication skills to translate technical security issues for diverse audiences.

What We Offer

Opportunity for career growth and development in the #1 FinTech company in the country Working with a dynamic and highly collaborative team who want to change the game A company that values their people with highly competitive and flexible compensation and benefits package