Application Security Threat Modeling Engineer (Hybrid)

Manulife; Quezon City; Hybrid; PHP 1,500,000 - 2,700,000; Full time

Benefits offered by this job

Hybrid work arrangement (3 onsite days

Job summary

Manulife is seeking an experienced Application Security Engineer specializing in Threat Modeling to join our Global Cybersecurity Services (GCS) Team in the Philippines. This individual-contributor role partners with engineering, architecture, product, and risk teams to identify design risks early, translate them into security requirements, and drive mitigations through the software development lifecycle.

The role requires strong technical judgment, facilitation, and the ability to clearly

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or related field, or equivalent practical experience.
• At least five years of experience across threat modeling, application security, security architecture, secure software development, cloud security, or related discipline.
• Experience leading collaborative threat modeling or secure design reviews for applications, APIs, cloud-native systems, or third-party integrations.
• Ability to analyze architectures and data flows, identify trust boundaries and attack paths, and translate findings into testable requirements and mitigations.

Responsibilities

• Independently lead threat modeling engagements for applications, APIs, cloud services, third-party integrations, and significant technology changes from design through implementation.
• Define scope and document system components, assets, data flows, entry points, trust boundaries, dependencies, and key assumptions.
• Translate identified threats into practical security requirements, design recommendations, test criteria, and remediation actions.

Skills

Threat modeling

Application security

Security architecture

Secure SDLC

Cloud security

Education

Bachelor's degree in CS/SE/IT or related field

Tools

Microsoft Threat Modeling Tool

OWASP Threat Dragon

IriusRisk

pytm

Visio

Job description

Manulife is seeking an experienced Application Security Engineer specializing in Threat Modeling to join our Global Cybersecurity Services (GCS) Team in the Philippines. This individual-contributor role partners with engineering, architecture, product, and risk teams to identify design risks early, translate them into security requirements, and drive mitigations through the software development lifecycle.

The role requires strong technical judgment, facilitation, and the ability to clearly