Application Security Specialist

Flat Planet Philippines , Inc.; Makati; Hybrid; PHP 900,000 - 1,900,000; Full time

Benefits offered by this job

Competitive Salary Package

Hybrid Work Setup

HMO Coverage

Life and Accident Insurance

Learning & Development Programs

Professional Certification Support

Global Career Opportunities

Wellness and Employee Support Programs

Performance and Recognition Programs

Exposure to Regional and Global Safety

Job summary

Flat Planet Philippines, Inc. is partnering with a globally recognized financial services organization to expand cybersecurity capabilities in the Philippines.

We are seeking an Application Security Specialist to embed security across SDLC, drive secure-by-design principles, and strengthen application security across markets and platforms. You will work with developers, architects, product owners, and security stakeholders to implement DevSecOps, conduct threat modeling, manage vulnerabilities,

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• 5+ years of hands-on experience in: Application Security, Application Penetration Testing, Secure Software Engineering.
• Strong expertise in OWASP Top 10, NIST Security Frameworks, Threat Modeling, Secure SDLC Controls, Application Security Principles.
• Deep understanding of CI/CD Security, API Security, Container Security, Kubernetes Security, Infrastructure as Code (IaC), Web Application Firewalls (WAF).
• Experience managing vulnerability remediation and application security testing programs.
• Excellent stakeholder management and communication skills.

Responsibilities

• Embed secure coding practices into SDLC and CI/CD pipelines.
• Lead threat modeling and secure design reviews for new apps and platforms.
• Manage vulnerability triage, remediation tracking, and reporting.
• Provide guidance on secure coding and conduct developer training.
• Support risk-based governance and regulatory compliance across cloud and hybrid environments.

Skills

Application Security

Application Penetration Testing

Secure Software Engineering

OWASP Top 10

NIST Security Frameworks

Threat Modeling

Secure SDLC Controls

Application Security Principles

CI/CD Security

API Security

Container Security

Kubernetes Security

Infrastructure as Code (IaC)

Web Application Firewalls (WAF)

Vulnerability remediation

Stakeholder management

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity / Engineering

Tools

Kubernetes Security

Container Security Platforms

Secrets Management Solutions

Cloud Security Tooling

Infrastructure as Code Security

Vulnerability Management Platforms

Job description

Flat Planet is partnering with a globally recognized financial services organization that is expanding its cybersecurity and technology capabilities in the Philippines. As part of its continued investment in secure software development, cloud transformation, and enterprise application security, the company is seeking an Application Security Specialist to join its growing security and engineering team.

This is an exciting opportunity to work on enterprise-scale applications, cloud-native technologies, and regional security initiatives while collaborating with global engineering, architecture, risk, and cybersecurity teams.

Job Summary

The Application Security Specialist will be responsible for embedding security throughout the Software Development Life Cycle (SDLC), driving secure-by-design principles, and strengthening application security practices across multiple markets and technology platforms.

The role will work closely with developers, architects, product owners, and security stakeholders to implement DevSecOps practices, conduct threat modeling, manage application vulnerabilities, and enable secure software delivery across cloud, containerized, and hybrid environments.

Job Description

DevSecOps Integration

• Embed secure coding practices into software development workflows and CI/CD pipelines.

• Implement and maintain automated security controls, including:

  • Static Application Security Testing (SAST)

  • Dynamic Application Security Testing (DAST)

  • Software Composition Analysis (SCA)

  • Secrets Scanning

• Partner with engineering teams to integrate security tooling into development and deployment processes.

• Promote continuous security testing and automation throughout the SDLC.

Threat Modeling & Secure Design

• Conduct architecture-level threat modeling for:

  • New applications and services

  • Platform upgrades

  • High-risk technology changes

  • Major software releases

• Facilitate secure design reviews and security architecture assessments.

• Develop threat models and risk mitigation strategies using standardized frameworks and playbooks.

• Ensure security requirements are incorporated early in the development lifecycle.

Vulnerability & Penetration Testing Management

• Lead vulnerability triage, risk contextualization, and remediation tracking activities.

• Manage findings from:

  • Application security assessments

  • Penetration tests

  • Bug bounty programs

  • Security reviews

• Collaborate with development teams to prioritize and remediate vulnerabilities.

• Track remediation progress and reporting to key stakeholders.

Developer Enablement & Security Advocacy

• Provide technical guidance on secure coding and application security best practices.

• Deliver secure coding awareness sessions and developer-focused training.

• Promote adherence to:

  • OWASP Top 10

  • NIST Security Standards

  • Secure SDLC Practices

• Serve as a trusted security advisor to development and engineering teams.

Security Governance & Risk Management

• Support risk-based exception reviews and security governance processes.

• Assist with vulnerability prioritization and remediation planning.

• Ensure compliance with internal security policies and regulatory requirements.

• Support security initiatives across cloud, containerized, and hybrid environments.

Skills & Experience

Required

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.

• 5+ years of hands-on experience in:

  • Application Security

  • Application Penetration Testing

  • Secure Software Engineering

• Strong expertise in:

  • OWASP Top 10

  • NIST Security Frameworks

  • Threat Modeling

  • Secure SDLC Controls

  • Application Security Principles

• Deep understanding of:

  • CI/CD Security

  • API Security

  • Container Security

  • Kubernetes Security

  • Infrastructure as Code (IaC)

  • Web Application Firewalls (WAF)

• Experience managing vulnerability remediation and application security testing programs.

• Excellent stakeholder management and communication skills.

Preferred

• Experience supporting enterprise-scale application security programs.

• Exposure to cloud-native and containerized environments.

• Experience driving DevSecOps initiatives within complex organizations.

• Background in financial services, insurance, banking, or highly regulated industries.

• Experience partnering with global engineering and security teams.

Certifications

Highly Preferred

• OSCP (Offensive Security Certified Professional)

• CISSP (Certified Information Systems Security Professional)

• Equivalent industry-recognized security certifications

Advanced Security Testing Certifications

• OSWP

• GIAC GWAPT

• INE eWPTX

Technology & Security Domains

Required

• Application Security

• Application Penetration Testing

• Threat Modeling

• Secure SDLC

• SAST

• DAST

• Software Composition Analysis (SCA)

• CI/CD Security

• API Security

• Web Application Firewalls (WAF)

Preferred

• Kubernetes Security

• Container Security Platforms

• Secrets Management Solutions

• Cloud Security Tooling

• Infrastructure as Code Security

• Vulnerability Management Platforms

Work Setup & Budget

Location: Makati City
Work Arrangement: Hybrid
Schedule: Regular Dayshift
Employment Type: Full-time

Why Join?

• Join a globally recognized financial services organization undergoing significant digital transformation.

• Drive application security and DevSecOps initiatives across multiple regional markets.

• Influence secure software development practices at enterprise scale.

• Work with modern cloud, container, and application security technologies.

• Collaborate with global engineering, architecture, and cybersecurity teams.

• Contribute to high-impact security programs supporting mission-critical business platforms.

• Enjoy long-term career growth within an innovative and security-focused environment.

Perks & Benefits

• Competitive Salary Package

• Hybrid Work Setup

• HMO Coverage

• Life and Accident Insurance

• Learning & Development Programs

• Professional Certification Support

• Global Career Opportunities

• Wellness and Employee Support Programs

• Performance and Recognition Programs

• Exposure to Regional and Global Security Initiatives