Application Security Engineer - Build Secure Delivery

Financial Times; Taguig; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Financial Times is seeking a Cyber Security Engineer to elevate application security across our cloud-native technology estate. This hands-on role focuses on building secure engineering practices for product, platform and software teams.

You will work with SAST, software composition analysis, secret scanning and vulnerability management to make security findings actionable and owned by the right teams. Some exposure to AWS or cloud security is useful though not essential.

Qualifications

• Practical experience in application security.
• Experience working with software engineers to remediate security issues.
• Familiarity with web application security risks and secure coding practices.
• Experience with vulnerability triage, prioritisation and remediation tracking.
• Experience using or interpreting findings from tools such as SAST, software composition analysis, secret scanning or similar.
• Experience participating in threat‑modelling activities.
• Ability to write scripts or small tools (preferably Python) to automate tasks.
• Strong communication and collaboration skills.
• Familiarity with Agile or Scrum ways of working.

Responsibilities

• Support practical threat modelling and triage of application vulnerabilities.
• Improve security guardrails across CI/CD pipelines and engineering workflows.
• Develop developer-friendly security tooling and guidance to reduce friction.
• Collaborate with engineers to embed security into normal delivery processes.
• Contribute to security playbooks and remediation guidance.

Skills

Application security

Threat modelling

Vulnerability management

CI/CD security

Secure coding guidance

Python scripting

Communication

Agile / Scrum

Tools

SAST

Software composition analysis

Secret scanning

Vulnerability tracking tools

GitHub CI/CD

Job description

Financial Times is seeking a Cyber Security Engineer to elevate application security across our cloud-native technology estate. This hands-on role focuses on building secure engineering practices for product, platform and software teams.

You will work with SAST, software composition analysis, secret scanning and vulnerability management to make security findings actionable and owned by the right teams. Some exposure to AWS or cloud security is useful though not essential.