DevSecOps App Security Enablement Engineer

PAN ASIA HR CONSULTING PH INC.; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

PAN ASIA HR CONSULTING PH INC. is seeking an experienced Application Security Enablement Engineer in the Philippines.

The role drives adoption of security standards across applications, development platforms, and cloud environments, integrating security into SDLC and CI/CD pipelines. You will conduct threat modeling, support vulnerability management, perform security testing, and provide guidance on secure coding practices (OWASP Top 10, NIST).

Qualifications

• Minimum of 5 years in Application Security or related roles.
• Strong knowledge of Secure SDLC and DevSecOps practices.
• Hands-on app pen testing and vulnerability assessment experience.
• Secure coding standards, OWASP Top 10 and NIST familiarity.
• Experience integrating security tools into CI/CD pipelines.

Responsibilities

• Drive enterprise app security standards across apps, platforms, and clouds.
• Integrate security into SDLC and CI/CD pipelines.
• Conduct threat modeling for new apps and major changes.
• Support vulnerability management including triage and remediation.
• Perform and validate security testing (automated and manual).
• Review findings from external tests and bug bounty programs.
• Provide guidance on secure coding practices and frameworks.
• Automate vulnerability detection, remediation tracking, and reporting.
• Support SAST, DAST, SCA, secrets management, container security.
• Collaborate with developers, architects, and security teams on secure-by-design.

Skills

Application Security

Secure SDLC

DevSecOps

Penetration Testing

Secure Coding

OWASP Top 10

NIST

CI/CD Integration

Vulnerability Mgmt

Threat Modeling

Remediation

SAST

DAST

SCA

Secrets Management

Container Security

WAF

Kubernetes

Docker

IaC Security

Tools

Kubernetes

Docker

SAST

DAST

SCA

Secrets Management

WAF

IaC security

Job description

PAN ASIA HR CONSULTING PH INC. is seeking an experienced Application Security Enablement Engineer in the Philippines.

The role drives adoption of security standards across applications, development platforms, and cloud environments, integrating security into SDLC and CI/CD pipelines. You will conduct threat modeling, support vulnerability management, perform security testing, and provide guidance on secure coding practices (OWASP Top 10, NIST).