Cybersecurity Analyst – Application Security | Up to 6200 | Changi #5252

PERSOL; Taytay; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Security-focused role

Job summary

PERSOL is seeking an experienced Application Security professional in the Philippines to conduct security reviews across applications, APIs, and development projects. The role requires hands-on work with SAST, SCA, and DAST tools to assess vulnerabilities and their business impact.

You will collaborate with Dev and DevOps teams to remediate findings, support secure SDLC and CI/CD security controls, and perform risk assessments for new systems and cloud environments.

Qualifications

• Degree or diploma in Cybersecurity, IT, Computer Science or a related discipline.
• 3–5 years of relevant experience in Application Security, Cybersecurity, Vulnerability Management or DevSecOps.
• Hands-on experience with SAST, SCA, DAST tools and vulnerability assessment.
• Good knowledge of OWASP Top 10, web application security and API security.
• Ability to assess exploitability, business impact and remediation requirements.
• Understanding of Secure SDLC, DevSecOps and CI/CD security controls.
• Knowledge of cloud security, preferably AWS.
• Experience in security risk assessments and risk acceptance is preferred.
• Relevant cybersecurity certifications are advantageous.
• Strong analytical, documentation and communication skills with technical and non-technical teams.

Responsibilities

• Conduct application security reviews and assessments across applications, APIs and development projects.
• Analyze findings from SAST, SCA and DAST tools to determine vulnerability applicability, exploitability and business impact.
• Assess application and dependency vulnerabilities, including reachable code paths, false positives and non-applicable findings.
• Review security waiver and risk acceptance requests, including justifications and compensating controls.
• Collaborate with development and DevOps teams to remediate vulnerabilities and track closure.
• Support integration of security controls into DevSecOps practices and CI/CD pipelines, including security scanning and gates.
• Conduct or support security risk assessments for new applications, system changes, APIs and cloud environments.
• Maintain security assessment reports, vulnerability records and risk documentation.

Skills

Analytical skills

Documentation

Communication skills

Team collaboration

Education

Cybersecurity/IT/CS degree or diploma

Tools

SAST

SCA

DAST

Job description

Job Descriptions:

• Conduct application security reviews and assessments across applications, APIs and development projects

• Analyze findings from SAST, SCA and DAST tools to determine vulnerability applicability, exploitability and business impact

• Assess application and dependency vulnerabilities, including reachable code paths, false positives and non-applicable findings

• Review security waiver and risk acceptance requests, including justifications, compensating controls and residual risks

• Collaborate with development and DevOps teams to recommend remediation measures and track vulnerabilities through to closure

• Support the integration of application security controls into DevSecOps practices and CI/CD pipelines, including security scanning and security gates

• Conduct or support security risk assessments for new applications, system changes, APIs, cloud environments and technology implementations

• Maintain security assessment reports, vulnerability records and risk documentation in accordance with established security policies

Job Requirements:

• Degree or diploma in Cybersecurity, IT, Computer Science or a related discipline

• 3–5 years of relevant experience in Application Security, Cybersecurity, Vulnerability Management or DevSecOps

• Hands-on experience with SAST, SCA, DAST tools and vulnerability assessment

• Good knowledge of Open Worldwide Application Security Project (OWASP) Top 10, web application security, API security and common vulnerabilities

• Ability to assess exploitability, business impact, reachable code paths and remediation requirements

• Understanding of Secure SDLC, DevSecOps and CI/CD security controls

• Knowledge of cloud security, preferably AWS, is an advantage

• Experience in security risk assessments, vulnerability triage and risk acceptance is preferred

• Relevant cybersecurity certifications are advantageous

• Strong analytical, documentation and communication skills with the ability to work effectively with technical and non-technical teams

EA License No: 90C3494 | EA Personnel No: R22107764 | EA Personnel Name: Sharmila Damodharan