Application Security Engineer: Build Secure, Scalable Apps

Interact Software; Metro Manila; Hybrid; PHP 900,000 - 1,300,000; Full time

Job summary

Interact is hiring an Application Security Engineer to work with engineers, find vulnerabilities, and build secure tooling. You will influence secure design decisions and help embed security into the development lifecycle.

The role emphasizes hands-on code review, threat modelling, and proactive risk management across our global applications. You'll collaborate with compliance to meet GDPR/ISO requirements and stay ahead of industry threats.

Qualifications

• Strong software engineering background with production code experience in .NET and/or TypeScript/React.
• Solid experience securing web apps and APIs.
• Demonstrated ability to manually find vulnerabilities and explain exploits and fixes.
• Ability to integrate and tune security testing in CI/CD pipelines.

Responsibilities

• Read and review code; review PRs for security changes and contribute fixes directly.
• Manually assess applications and APIs to identify real vulnerabilities.
• Build secure building blocks and safe wrappers for common patterns.
• Perform threat modelling and design reviews for new features.
• Automate security into CI/CD pipelines using tools like Octopus/Azure DevOps.
• Support incident investigation and remediation for application security issues.

Skills

Security engineering

OWASP Top Ten

CI/CD security

Threat modelling

Vulnerability assessment

Code review

Cloud security

Security tooling

Communication

Tools

Burp Suite

OWASP ZAP

Fortify

Checkmarx

SonarQube

Job description

Interact is hiring an Application Security Engineer to work with engineers, find vulnerabilities, and build secure tooling. You will influence secure design decisions and help embed security into the development lifecycle.

The role emphasizes hands-on code review, threat modelling, and proactive risk management across our global applications. You'll collaborate with compliance to meet GDPR/ISO requirements and stay ahead of industry threats.