AppSec Enablement Engineer for Secure DevOps

Manulife/John Hancock; Makati; Hybrid; PHP 1.200.000 - 1.800.000; Vollzeit

Benefits dieser Stelle

Hybrid work

Equal opportunity employer

Zusammenfassung

Manulife/John Hancock is seeking an experienced Application Security Expert in a hybrid role in Metro Manila. The candidate will promote secure coding practices, guide DevSecOps workflows, and integrate security into CI/CD pipelines across enterprise applications and cloud environments.

Responsibilities include threat modeling, security testing (SAST/DAST), and providing actionable guidance to development teams to reduce risk and improve security posture.

Qualifikationen

• Minimum 5+ years in application security or secure software development.
• Strong knowledge of SDLC, CI/CD, and secure coding practices.
• Experience with application penetration testing and OWASP guidance.

Aufgaben

• Drive adoption of enterprise app security standards across apps, platforms, and cloud.
• Enable automation for vulnerability detection, remediation, and reporting.
• Provide risk-based guidance and training to developers on secure design.
• Embed secure-by-design principles with architects and product teams.
• Conduct and validate app security testing including external findings.

Kenntnisse

Application security

DevSecOps

Secure coding

OWASP Top 10

CI/CD pipelines

Threat modeling

Ausbildung

Bachelor's degree in CS/IS

Tools

SAST

DAST

SCA

Secrets management

Container security

Kubernetes

IaC tooling

Jobbeschreibung

Manulife/John Hancock is seeking an experienced Application Security Expert in a hybrid role in Metro Manila. The candidate will promote secure coding practices, guide DevSecOps workflows, and integrate security into CI/CD pipelines across enterprise applications and cloud environments.

Responsibilities include threat modeling, security testing (SAST/DAST), and providing actionable guidance to development teams to reduce risk and improve security posture.