Application Security Engineer – Secrets & Secure SDLC

Manulife group; Quezon City; Hybrid; PHP 1,000,000 - 1,500,000; Full time

Job summary

Manulife is seeking an Application Security Engineer (Secure Development and Secrets Management) to strengthen our Global Cybersecurity Services. The role partners with developers and stakeholders to remediate secrets, design secure solutions, and integrate with enterprise platforms like Azure Key Vault and HashiCorp Vault.

The ideal candidate has strong software engineering fundamentals and hands-on application security experience, with the ability to communicate remediation strategies and

Qualifications

• Bachelor's degree in computer science or related technical field.
• 5+ years in software engineering with secure development and remediation.
• Experience securing backend services and APIs.
• Experience with Secure SDLC and remediation practices.
• Knowledge of secrets management platforms (Azure Key Vault, HashiCorp Vault).
• Strong communication with technical and non-technical stakeholders.

Responsibilities

• Assess applications for hard-coded secrets, credentials, certificates, API keys, and configuration risks; support secure migration approaches using Azure Key Vault, HashiCorp Vault, or equivalent platforms.
• Design, develop, and maintain secure backend services, APIs, reusable components, libraries, and utilities using Java, Python, C#, or equivalent technologies.
• Contribute to scalable automation and automated remediation capabilities; integrate security controls into CI/CD pipelines.
• Analyze findings from SAST, DAST, SCA, secrets scanning, pen testing, code reviews; support risk-based remediation.
• Participate in solution and architecture reviews; recommend secure patterns and address root causes.
• Communicate security risks, remediation plans, and guidance to technical and non-technical stakeholders across global teams.

Skills

Secure SDLC

Application Security

Vulnerability remediation

GitHub Actions

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

Azure Key Vault

HashiCorp Vault

GitHub

CI/CD tooling

Job description

Manulife is seeking an Application Security Engineer (Secure Development and Secrets Management) to strengthen our Global Cybersecurity Services. The role partners with developers and stakeholders to remediate secrets, design secure solutions, and integrate with enterprise platforms like Azure Key Vault and HashiCorp Vault.

The ideal candidate has strong software engineering fundamentals and hands-on application security experience, with the ability to communicate remediation strategies and