Application Security Engineer: Secrets & Secure SDLC

Manulife Global Solutions (MGS); Philippines; Hybrid; PHP 1,200,000 - 2,400,000; Full time

Job summary

Manulife Global Solutions (MGS) is seeking an Application Security Engineer to join the GCS – Application Security Rapid Lab Team. You will collaborate with security and development teams to remediate secrets and strengthen secure software development across enterprise platforms.

The role requires deep hands-on security experience, practical knowledge of Azure Key Vault/HashiCorp Vault, and the ability to communicate technical risk and remediation strategies across global teams.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, or related discipline.
• 5+ years of software engineering with secure development and remediation experience.
• Proven backend development experience with secure patterns and APIs.
• Hands-on Secure SDLC implementation and secure coding practices.
• Experience triaging findings from SAST, DAST, SCA, and pentesting.
• Knowledge of secrets management and enterprise vault platforms.

Responsibilities

• Assess applications for hard-coded secrets and remediation risks.
• Design secure migration approaches using Azure Key Vault or HashiCorp Vault.
• Develop secure backend services, APIs, and reusable components.
• Integrate security controls into CI/CD pipelines and automation.
• Analyze findings from security assessments and prioritize remediations.
• Participate in architecture reviews and communicate security trade-offs to stakeholders.

Skills

Secure development

Vulnerability remediation

Secrets management

Backend security

CI/CD security

Cloud security

Security testing

Automation

Stakeholder communication

Education

Bachelor’s degree in Computer Science or related field

Tools

Azure Key Vault

HashiCorp Vault

GitHub

GitHub Actions

GitGuardian

Snyk

CI/CD pipelines

Job description

Manulife Global Solutions (MGS) is seeking an Application Security Engineer to join the GCS – Application Security Rapid Lab Team. You will collaborate with security and development teams to remediate secrets and strengthen secure software development across enterprise platforms.

The role requires deep hands-on security experience, practical knowledge of Azure Key Vault/HashiCorp Vault, and the ability to communicate technical risk and remediation strategies across global teams.