Application Security Engineer / Application Security Lead

Recruitify_HR; Taguig; On-site; PHP 800,000 - 1,000,000; Full time

Job summary

A security-focused tech company in Taguig seeks an experienced Application Security Engineer to secure applications throughout the software development lifecycle. This role involves implementing security testing practices and integrating security into Azure DevOps pipelines. Candidates should have at least 2 years of experience in application security or DevSecOps, with strong hands-on skills in SAST, DAST, API security testing, and familiarity with cloud platforms. The position offers a hybrid work model and a day shift.

Qualifications

• Minimum 2 years of experience in application security or DevSecOps.
• Hands-on experience with SAST, DAST, and SCA.
• Familiarity with OWASP Top 10 and API security testing.

Responsibilities

• Embed security across SDLC from design to deployment.
• Implement security testing and integrate into CI/CD pipelines.
• Conduct penetration testing and manage vulnerabilities.

Skills

Application security

DevSecOps

SAST

DAST

API security testing

Penetration testing

Azure DevOps

Communication skills

Tools

Azure

AWS

GCP

Job description

Application Security Engineer / Application Security Lead DevSecOps Azure DevOps

Hybrid Cubao Quezon City

Day shift

Join a high impact security team and help embed security into modern cloud and DevOps environments. This role focuses on securing applications across the full software development lifecycle using automation and DevSecOps practices.

What you will do

• Embed security across the SDLC from design to deployment
• Implement application security testing including SAST DAST SCA IAST and RASP
• Integrate security controls into Azure DevOps pipelines with automated quality gates
• Perform API security testing including authentication authorization and abuse scenarios
• Conduct or support penetration testing and validate remediation
• Lead threat modeling and secure design reviews for modern applications
• Manage vulnerability triage prioritization and remediation tracking
• Promote secure coding practices and guide development teams
• Support cloud application security across Azure AWS or GCP
• Implement secrets management and secure configurationsBuild dashboards and metrics for security performance and risk tracking
• Drive DevSecOps adoption through automation and developer enablement

What we are looking for

• At least 2 plus years experience in application security or DevSecOps
• Strong hands on experience in SAST DAST and SCA
• Experience with API security testing and OWASP Top 10
• Background in penetration testing and vulnerability management
• Experience integrating security into CI CD pipelines
• Working knowledge of Azure DevOps pipelines and automation
• Experience with at least one cloud platform Azure AWS or GCP
• Development background with ability to read and review code
• Familiar with containers microservices and modern architectures
• Strong communication and stakeholder management skills