Application Security Officer

Meralco Industrial Engineering Services Corporation; Pasig; On-site; PHP 750,000 - 1,100,000; Full time

Benefits offered by this job

Competitive compensation

Health and wellness benefits

Professional development programmes

Flexible working arrangements

Job summary

Meralco Industrial Engineering Services Corporation in Pasig City seeks an experienced Application Security Officer to safeguard our application portfolio and lead security practices across our systems. You will conduct security assessments, code reviews, and penetration testing, implement policies, mentor developers, manage SAST/DAST/SCA tools, and contribute to audits and compliance.

Requires a bachelor’s in IT/CS/Cybersecurity and 2+ years in application security, with OWASP Top 10 knowledge

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity or related field is required.
• Minimum 2 years of professional experience in application security or related security role.
• Strong knowledge of secure coding practices and OWASP Top 10.

Responsibilities

• Conduct security assessments, code reviews, and penetration testing on applications to identify vulnerabilities.
• Develop and implement application security policies, standards, and best practices.
• Collaborate with development teams to remediate security issues and provide secure coding guidance.
• Manage and maintain SAST, DAST, and SCA tools.
• Design and deliver security training for developers and staff.
• Monitor security incidents related to applications and provide root cause analysis.
• Maintain documentation for audit and compliance purposes.
• Stay updated on threats and communicate updates to stakeholders.
• Support risk management and compliance initiatives.

Skills

Application security

Security testing

OWASP Top 10

Code reviews

Penetration testing

Secure coding guidance

Threat modelling

Security architecture

Communication

Regulatory awareness

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity

Tools

Burp Suite

SonarQube

Checkmarx

Job description

About the role

We are seeking an experienced Application Security Officer to join Meralco Industrial Engineering Services Corporation in Pasig City, Metro Manila. This is a full-time position that plays a critical role in safeguarding our digital assets and ensuring robust security practices across our application portfolio. As Application Security Officer, you will be responsible for identifying, assessing, and mitigating security vulnerabilities in our applications, whilst driving a culture of security awareness throughout the organisation. This role is integral to our commitment to maintaining the highest standards of information security and protecting our business operations.

Key responsibilities

• Conduct security assessments, code reviews, and penetration testing on applications to identify and document vulnerabilities and security weaknesses
• Develop and implement application security policies, standards, and best practices aligned with industry frameworks and compliance requirements
• Collaborate with development teams to remediate security issues and provide guidance on secure coding practices
• Manage and maintain application security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) platforms
• Design and deliver security training programmes for developers and technical staff to raise awareness of application security threats and mitigation strategies
• Monitor and analyse security incidents related to applications, providing root cause analysis and recommendations for prevention
• Maintain documentation of security assessments, findings, and remediation efforts to support audit and compliance requirements
• Stay current with emerging security threats, vulnerabilities, and industry best practices, and communicate relevant updates to stakeholders
• Support the organisation's risk management and compliance initiatives, including regulatory and certification requirements

What we're looking for

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field
• Minimum 2 years of professional experience in application security, security engineering, or a similar security-focused role
• Strong knowledge of secure coding practices, OWASP Top 10, and application vulnerability assessment methodologies
• Proficiency with security testing tools such as Burp Suite, SonarQube, Checkmarx, or similar platforms
• Experience with multiple programming languages and frameworks to effectively review code for security issues
• Familiarity with security frameworks, standards, and compliance requirements such as ISO 27001, NIST, PCI DSS, or similar
• Strong understanding of threat modelling, risk assessment, and security architecture principles
• Excellent communication and interpersonal skills to effectively collaborate with technical and non-technical stakeholders
• Relevant security certifications such as CISSP, CEH, GIAC, OSCP, or similar are highly desirable
• Problem-solving abilities and attention to detail, with the ability to manage multiple priorities in a fast-paced environment

What we offer

Meralco Industrial Engineering Services Corporation is committed to supporting the professional growth and wellbeing of our employees. We offer a competitive compensation package, comprehensive health and wellness benefits, and opportunities for continuous learning and development. We provide access to professional development programmes, industry certifications, and training initiatives that enable you to expand your expertise and advance your career. We foster a collaborative work environment where your contributions are recognised and valued, and we encourage innovation and creative problem-solving. Additionally, we support work-life balance through flexible working arrangements where appropriate, and provide a supportive workplace culture that prioritises the health and wellbeing of all our team members.

About us

Meralco Industrial Engineering Services Corporation is a trusted partner in delivering comprehensive industrial engineering and security solutions. With a commitment to excellence and innovation, we serve clients across the Philippines by providing specialised technical expertise and professional services. Our organisation is built on principles of integrity, reliability, and continuous improvement, and we take pride in our ability to attract and retain top-tier talent. We are dedicated to maintaining the highest standards of service quality whilst fostering a workplace culture that values expertise, collaboration, and professional development.