Application Security Engineer

Career Connect; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Career Connect is seeking an Application Security Engineer to assess the security of new applications and systems, perform security assessments, and collaborate with the R&D team to implement a robust security framework.

The role ensures that deployed applications meet global security standards, protecting the company from threats and maintaining security across all deployed systems.

Qualifications

• Bachelor’s degree in CS, Engineering or related field required.
• 5 years in IT with 2 years in information security focusing on IT governance, network, or app security.
• Experience with banking and digital transformation is a plus.
• Knowledge of regulatory issues and technology trends.

Responsibilities

• Conduct security risk and threat assessments for new applications and systems.
• Run vulnerability scans, penetration testing, and exploit code execution to identify risks.
• Recommend and implement technical solutions to address vulnerabilities.
• Collaborate with development teams to integrate security into the SDLC.
• Maintain records of security vulnerabilities and remediation actions.
• Provide information security training to educate users on protecting data.
• Adhere to quality and compliance standards of the Information Security Management System.

Skills

Security risk assessments

Vulnerability management

Penetration testing

Communication

Problem solving

Team leadership

Education

Bachelor’s degree in Computer Science, Engineering, or related field

Tools

SAST

Vulnerability scanners

SDLC security integration

Penetration testing tools

Job description

The Application Security Engineer is responsible for assessing the security of new applications and systems, conducting security assessments, and collaborating with the research and development team to implement a robust security framework. The role ensures that all applications deployed meet global security standards, protecting the company from potential threats.

The Application Security Engineer is accountable for maintaining the security of all applications and systems deployed within the company. This includes identifying and addressing vulnerabilities, implementing security solutions, and ensuring compliance with global security standards.

DUTIES AND RESPONSIBILITIES

• Security Risk Assessments: Conduct security risk and threat assessments for new applications and systems.
• Vulnerability Testing: Run vulnerability scans, penetration testing, and exploit code execution to identify potential risks.
• Security Remediation: Recommend and implement technical solutions to address vulnerabilities identified during assessments.
• Security Framework Development: Collaborate with the development team to integrate security protocols within the software development lifecycle (SDLC)
• Documentation & Reporting: Maintain updated records of security vulnerabilities and remediation actions.
• Training: Conduct information security training to educate users on protecting company data against potential threats.
• Adhere to quality and compliance standards as part of our Information Security Management System. This includes following documented processes, participating in continuous improvement, and maintaining accurate records. Each team member is responsible for supporting a safe, efficient, and customer-focused work environment.

Requirements

• Bachelor’s degree in Computer Science, Engineering, or related field.
• 5 years in IT, with 2 years in information security, focusing on IT governance, network, or application security.
• Problem-solving mindset, project management, product and software development lifecycles, leadership, and experience in banking and digital transformation.
• Knowledge of advanced business planning, regulatory issues, and technology trends.
• Technical
• Vulnerability Management: Expertise in conducting security assessments, running vulnerability scans, and addressing identified risks.
• Penetration Testing: Proficient in performing penetration tests and executing exploit code to identify potential vulnerabilities.
• Security Framework Implementation: Strong capability in integrating security protocols into the software development lifecycle (SDLC).
• Security Tools: Knowledge of SAST (Static Application Security Testing) and other security tools to detect and remediate vulnerabilities.
• Behavioral
• Problem-Solving: Analytical and proactive in addressing security issues and vulnerabilities.
• Communication: Effective in liaising with development teams and stakeholders to ensure security compliance.
• Attention to Detail: High level of accuracy in identifying and addressing security flaws and maintaining security documentation.
• Collaboration: Ability to work with cross-functional teams to implement security best practices.