Application Security Engineer - Secrets & Vaults

Manulife; Manila; Hybrid; PHP 1.200.000 - 1.800.000; Vollzeit

Zusammenfassung

Manulife is seeking an Application Security Engineer to join the Global Cybersecurity Services (GCS) - Application Security Rapid Lab Team. You will advance enterprise secrets remediation, secure software development, and integration with Azure Key Vault or HashiCorp Vault.

The role blends strong software engineering with hands-on security work across global teams. Responsibilities include remediation of hard-coded secrets, secure backend development, automation in CI/CD pipelines, and

Qualifikationen

• Minimum of five years of software engineering experience, including secure application development and vulnerability remediation.
• Experience applying Secure SDLC principles and secure coding practices across design, development, testing, deployment, and maintenance.
• Hands-on experience with secrets management and integration using Azure Key Vault or HashiCorp Vault.
• Experience triaging findings from SAST, DAST, SCA, secrets scanning, and vulnerability assessments.

Aufgaben

• Assess applications for hard-coded secrets, credentials, certificates, API keys, and configuration risks; implement secure migration using Azure Key Vault or HashiCorp Vault.
• Design, develop, and maintain secure backend services, APIs, and utilities using Java, Python, or C# with Secure SDLC principles.
• Contribute to automation, CI/CD pipeline security, and remediation tooling to reduce manual effort.
• Engage with stakeholders to communicate risks, remediation plans, and technical guidance.
• Participate in architecture reviews and promote secure patterns to reduce recurring risks.

Kenntnisse

Secure SDLC

Backend development

CI/CD pipelines

Secrets management

Vulnerability remediation

OWASP Top 10

Cloud security

GitHub Actions

Ausbildung

Bachelor's degree

Tools

Azure Key Vault

HashiCorp Vault

GitHub

Snyk

Jobbeschreibung

Manulife is seeking an Application Security Engineer to join the Global Cybersecurity Services (GCS) - Application Security Rapid Lab Team. You will advance enterprise secrets remediation, secure software development, and integration with Azure Key Vault or HashiCorp Vault.

The role blends strong software engineering with hands-on security work across global teams. Responsibilities include remediation of hard-coded secrets, secure backend development, automation in CI/CD pipelines, and