Asia Application Security Engineer (DevSecOps)

Manulife IT Delivery Center Asia Inc.; Makati; Hybrid; PHP 1,800,000 - 3,000,000; Full time

Job summary

Manulife IT Delivery Center Asia Inc. is seeking an experienced Application Security professional to lead secure coding and DevSecOps across the SDLC in Asia.

The role emphasizes vulnerability management, threat modeling, and collaboration with architects and developers to embed secure-by-design practices. Key responsibilities include automating vulnerability detection, validating findings, and guiding teams on OWASP-based design and coding standards.

Qualifications

• Minimum 5+ years in application security or software development with a focus on secure coding and DevSecOps.
• Strong understanding of application security principles, SDLC, and CI/CD pipelines.
• Strong understanding of application penetration testing.
• Knowledge of secure coding standards and frameworks (e.g., OWASP Top 10, NIST).
• Excellent collaboration and communication skills to engage developers and stakeholders.

Responsibilities

• Help drive adoption of enterprise application security standards across applications, platforms, and cloud environments.
• Enable automation for vulnerability detection, remediation, exception review and reporting to improve efficiency and consistency.
• Provide actionable, risk-based technical guidance and training to developers on secure design and coding standards (e.g., OWASP).
• Partner with architects, product owners, and development teams during design and planning phases to embed secure-by-design principles.
• Conduct and validate application security testing (automated and manual), including intake and validation of findings from external penetration tests and bug bounty programs.

Skills

Application security

Secure coding

DevSecOps

CI/CD pipelines

Threat modeling

Tools

SAST

DAST

SCA

OWASP

Container security

Job description

Manulife IT Delivery Center Asia Inc. is seeking an experienced Application Security professional to lead secure coding and DevSecOps across the SDLC in Asia.

The role emphasizes vulnerability management, threat modeling, and collaboration with architects and developers to embed secure-by-design practices. Key responsibilities include automating vulnerability detection, validating findings, and guiding teams on OWASP-based design and coding standards.