Application Security Engineer — Build Secure Software

wawa; Batangas City; Presencial; PHP 5.653.000 - 8.166.000; Jornada completa

Descripción de la vacante

Wawa seeks an Application Security Engineer to operate and enhance its application security program across the Software Development Life Cycle. You will work with developers and product owners to embed secure coding and mitigate threats.

The role requires hands-on experience with containers, cloud security, Java, and security testing, plus strong communication to diverse audiences. On-site at corporate offices with ASC support.

Formación

• Minimum 2 years in application security engineering in a complex tech environment.
• Advanced knowledge of containers and container security.
• Solid knowledge of cloud technology and security.
• Solid knowledge of Java programming.
• Basic knowledge of Golang programming.
• Basic knowledge of React and React Native programming.
• Experience with reading and writing enterprise software.
• Up-to-date knowledge of common security weaknesses and how to remediate them.
• Advanced knowledge of OWASP guidance.
• Solid knowledge of web protocols (TCP/IP, HTTP, HTTPS, REST).
• Understanding of PCI DSS and related regulatory requirements.
• Degree in computer science preferred, or equivalent.
• Security certifications (CISSP, CISM, GIAC, CSSLP, CEH) preferred.
• Knowledge of information security management frameworks (NIST CSF, 800-53, CSC).
• Knowledge of application security concepts: SAST, DAST, SCA, IaC, cryptography, authn/authz, API security.
• Experience with scripting automation (Python, PowerShell, Unix shell, JavaScript/TypeScript).
• Experience with DevSecOps and SAFE Agile methodologies.

Responsabilidades

• Operate and support the Application Security Program across the SDLC.
• Identify security threats, vulnerabilities, and remediation options.
• Develop and maintain secure coding practices, policies, and standards.
• Perform security testing and vulnerability management.
• Deliver security presentations to technical and non-technical audiences.
• Collaborate with developers and product owners to secure applications.
• Participate in security reviews, penetration testing, and threat modeling.
• Support audit and regulatory compliance efforts.

Conocimientos

Containers security

Cloud security

Java

Golang

React/React Native

Enterprise software

OWASP

Web protocols

DevSecOps

Scripting

Educación

Degree in Computer Science

Security certifications (CISSP, CISM, GIAC, CSSLP, CEH)

Herramientas

Python

PowerShell

Unix shell

JavaScript/TypeScript

SAST/DAST tools

IaC

API security tooling

Descripción del empleo

Wawa seeks an Application Security Engineer to operate and enhance its application security program across the Software Development Life Cycle. You will work with developers and product owners to embed secure coding and mitigate threats.

The role requires hands-on experience with containers, cloud security, Java, and security testing, plus strong communication to diverse audiences. On-site at corporate offices with ASC support.