Application Security Engineer: Secure Dev & Secrets

Manulife; Manila; Híbrido; PHP 1 200 000 - 2 100 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work arrangement

Resumo da oferta

Manulife is seeking an Application Security Engineer (Secure Development and Secrets Management) to join our Global Cybersecurity Services team. You will partner with developers and stakeholders to remediate secrets, design secure solutions, and integrate with enterprise platforms like Azure Key Vault and HashiCorp Vault.

You will assess applications for secrets risks, design secure backend services, and contribute to CI/CD security across multiple projects.

Qualificações

• Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering, Information Technology, Cybersecurity, or a related technical discipline.
• Minimum of five years of software engineering experience, including secure application development and vulnerability remediation using Java, Python, C#, or equivalent technologies.
• Proven experience developing backend applications, APIs, reusable components, automation utilities, and security-focused tools or frameworks.
• Hands‑on experience applying Secure SDLC principles and secure coding practices across design, development, testing, deployment, and maintenance.
• Experience triaging and remediating findings from SAST, DAST, SCA, secrets scanning, penetration testing, code reviews, and vulnerability assessments.
• Working knowledge of secrets management, credential lifecycle management, and application integration using Azure Key Vault, HashiCorp Vault, or equivalent enterprise platforms.
• Knowledge of securely managing API keys, tokens, certificates, database credentials, and other application secrets, including remediation and rotation practices.
• Strong understanding of application security, OWASP Top 10, vulnerability management, API security, backend architecture, object-oriented programming, design patterns, and reusable component design.
• Hands‑on experience with GitHub, GitHub Actions, GitGuardian, Snyk, CI/CD pipelines, modern development environments, and security testing or vulnerability management platforms.
• Demonstrated ability to explain technical designs, architecture decisions, security trade-offs, remediation approaches, and individual project contributions.
• Ability to work independently, manage complex technical challenges, and collaborate effectively with developers, architects, executives, and business stakeholders.
• Excellent verbal and written communication, problem-solving, customer focus, and stakeholder management skills.
• Amenable to work at UP Ayala Technohub, Quezon City under a hybrid setup (three days a week).
• Amenable to work on a fixed late mid-shift or night-shift schedule based on business requirements.

Responsabilidades

• Assess applications for hard-coded secrets, credentials, certificates, API keys, and configuration risks; support secure migration using Azure Key Vault, HashiCorp Vault, or equivalent platforms.
• Design, develop, and maintain secure backend services, APIs, reusable components, libraries, and utilities using Java, Python, C#, or equivalent technologies.
• Contribute to scalable automation and automated remediation capabilities; integrate security controls into CI/CD pipelines.
• Analyze and prioritize findings from SAST, DAST, SCA, secrets scanning, penetration testing, code reviews, and other assessments; support risk-based remediation.
• Participate in solution and architecture reviews; recommend secure patterns and address root causes to reduce recurring security risks.
• Communicate security risks, remediation plans, and implementation guidance to technical and non-technical stakeholders across global teams.

Conhecimentos

Secure SDLC

Application Security

CI/CD Pipelines

Secrets Management

Java/Python/C#

GitHub Actions

SAST/DAST

Formação académica

Bachelor's degree in CS/SE/IT/Cybersecurity

Ferramentas

Azure Key Vault

HashiCorp Vault

GitGuardian

Snyk

Descrição da oferta de emprego

Manulife is seeking an Application Security Engineer (Secure Development and Secrets Management) to join our Global Cybersecurity Services team. You will partner with developers and stakeholders to remediate secrets, design secure solutions, and integrate with enterprise platforms like Azure Key Vault and HashiCorp Vault.

You will assess applications for secrets risks, design secure backend services, and contribute to CI/CD security across multiple projects.