Application Security QA Analyst – Penetration Testing

Manulife

Manila

Hybrid

PHP 900,000 - 1,500,000

Full time

6 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Manulife is seeking an experienced Application Security Engineer to act as the QA point for penetration testing deliverables across applications and APIs. You will review reports, validate evidence, calibrate risk, and guide remediation with stakeholders in a hybrid Manila-based role.

Responsibilities include final report reviews, evidence validation, CVSS-based severity calibration, and collaboration with testers and platform owners to ensure high testing quality and reliable closure of

Qualifications

Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or equivalent experience.
At least 3 years’ experience in penetration testing, application security, vulnerability management, or security QA.
Hands-on review of penetration test reports, evidence validation, risk and remediation verification.

Responsibilities

Perform final quality reviews of penetration test reports before release.
Validate evidence, exploitability, and business impact; challenge weak conclusions.
Calibrate severity ratings using CVSS and environmental context.
Ensure test scope and methodology are fully documented and gaps addressed.
Provide practical, risk-based remediation guidance and evidence required for closure.
Track findings, remediation dates, and retesting activities; escalate risks as needed.
Triage new vulnerabilities to determine relevance and required validation.
Support Burp Suite and Snyk operations, including configuration and troubleshooting.
Maintain quality templates, checklists, and reporting standards; suggest improvements.
Produce accurate status updates and risk-based reporting for stakeholders.