Application Security Lead - DevSecOps & Automation

City Government of Muntinlupa - Government

Muntinlupa

On-site

PHP 1,000,000 - 1,500,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

The City Government of Muntinlupa is seeking a Software Security Engineer to embed secure practices across the Software Development Life Cycle and drive automated vulnerability assessments. You will provide technical leadership, mentor teams, and ensure secure DevOps workflows while coordinating with IT and business stakeholders to improve security posture and compliance.

Ideal candidates have strong knowledge of OWASP Top 10, cloud security (AWS), and scripting, with experience in security

Qualifications

A bachelor’s degree in information security, computer science, engineering or related field.
At least 4 years of experience in Application Security.
Advanced knowledge of tools like SAST, DAST, CI/CD Integration, OWASP ZAP, Snyk, SonarQube, Nessus.
Familiarity with OWASP Top 10, secure API development, and server hardening.
Strong understanding of secure application development frameworks, vulnerability remediation, and compliance standards.
Leadership and communication skills for cross-functional collaboration.
Proficiency in automation and scripting is an advantage.
With ISO and Cybersecurity-related training.
CSSLP, CISSP, or Certified DevSecOps Professional is an advantage.
Strong cloud security knowledge (AWS), and experience with Databases, Systems and Network.

Responsibilities

Leads the design and implementation of security automation in CI/CD pipelines.
Oversee vulnerability management processes and ensure timely remediation.
Collaborate with stakeholders to align security initiatives with business objectives.
Monitors emerging threats and recommend improvements to security posture.
Monitors security alerts and facilitate investigations to minimize the impact of incidents.
Prepares and presents comprehensive application security reports and documentation to stakeholders, highlighting potential risks and breaches, and recommendations for improving.
Participates in vulnerability assessments to identify and address security flaws.
Analyzes and responds to security-related ticket requests to assess risks and ensure application security.
Attends departmental meetings and drafts minutes to track the status of security compliance requests.
Conducts regular audits on Software Applications to ensure compliance with security practices.
Works with IT engineers to make sure that application systems and servers are safe from external threats.
Security Education: Educating teams about application and infrastructure security best practices.