Application Security QA Engineer for Risk & Remediation

Manulife group; Quezon City; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

Manulife is seeking an experienced Application Security Engineer to serve as the quality-assurance point for penetration testing deliverables across applications and APIs. You will independently review reports, validate evidence, and guide remediation with stakeholders in a hybrid setup at UP Ayala Technohub, Quezon City.

You will work with penetration testers, vulnerability management leads, and technology stakeholders to ensure consistent reporting, improve testing quality, and provide clear

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or related field, or equivalent practical experience.
• At least three years of experience in penetration testing, application security, vulnerability assessment, vulnerability management, or security quality assurance.
• Hands-on experience reviewing penetration test reports, validating evidence, assessing exploitability and business impact, and confirming remediation through retesting.
• Strong knowledge of web application and API security, OWASP testing practices, CVSS, CWE, and vulnerability classification.
• Practical experience with Burp Suite Professional or comparable tools.
• Experience with SAST, DAST, SCA, open-source vulnerability management, DevSecOps pipelines, and vulnerability lifecycle.
• Clear written and verbal communication skills for technical and non-technical stakeholders.
• Ability to work with globally distributed teams in a hybrid setting at UP Ayala Technohub, Quezon City, with onsite days.

Responsibilities

• Perform final quality reviews of penetration test reports before release, ensuring accuracy and evidence-based findings.
• Validate assets, exploitation paths, business impact, and duplicate or false positives; challenge conclusions when evidence differs.
• Review severity ratings using CVSS, exploitability, asset criticality, and controls.
• Ensure scope, methodology, and conclusions are complete and documented; address gaps with testers.
• Provide risk-based remediation guidance and help teams understand required actions and evidence for closure.
• Track findings, remediation dates, retesting, and closure decisions or residual risks.
• Triage new vulnerabilities to determine relevance and escalation needs.
• Support Burp Suite and Snyk operations, including access requests, configuration, and reporting.
• Maintain quality standards, templates, and procedures; propose improvements.

Skills

Web security

API security

CVSS

Remediation guidance

Report review

Clear communication

Global collaboration

Education

Bachelor's degree in CS/CE/IT

Tools

Burp Suite Pro

Snyk

Job description

Manulife is seeking an experienced Application Security Engineer to serve as the quality-assurance point for penetration testing deliverables across applications and APIs. You will independently review reports, validate evidence, and guide remediation with stakeholders in a hybrid setup at UP Ayala Technohub, Quezon City.

You will work with penetration testers, vulnerability management leads, and technology stakeholders to ensure consistent reporting, improve testing quality, and provide clear