Application Security Engineer: Secrets & Vaults

Manulife

Philippines

Hybrid

PHP 1,000,000 - 1,400,000

Full time

7 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Manulife is seeking a Security Engineer with a secured Application Development background to join the Global Cybersecurity Services – Application Security Rapid Lab team in Quezon City. The role focuses on remediation of secrets and credentials in source code and building secured modules to help business units avoid secrets in code repositories.

You will work with the Application Security core team to design and implement remediation strategies, APIs, and reusable libraries, while ensuring

Qualifications

Bachelor’s degree in computer science or related discipline.
Minimum 3 years of hands-on application development experience, preferably using Java/Python/C#.
At least 3 years of experience in software secrets management, credentials, and secret lifecycle in application development.
Demonstrated knowledge of secure SDLC and security testing (SCA, SAST, DAST, Secrets scans).
Familiarity with security assessment frameworks and best practices.

Responsibilities

Work with Application Security team to drive secrets remediation initiatives.
Contribute to building internal reusable libraries for remediation of secrets/credentials in source code.
Evaluate security requirements and migrate secrets to vaults (AKV, Hashicorp).
Design secure code and ensure it passes Application Security gates.
Develop utilities to resolve hard-coded secrets in configuration files and migrate to vaults.
Participate in project meetings and organize solution design, checkpoints.
Promote automation and self-healing approaches in remediation efforts.