DevSecOps Application Security Enablement Engineer

Manulife John Hancock; Makati; Presencial; PHP 1 800 000 - 3 200 000; Tempo integral

Resumo da oferta

Manulife John Hancock seeks an experienced application security leader to drive secure-by-design practices across the Asia markets. You will embed security into the SDLC, lead threat modeling, and enable automation for vulnerability management in collaboration with developers, architects, and product teams.

You will partner with global security functions to uplift standards and support audit, regulatory, and control assurance activities while nurturing a diverse, inclusive global team.

Qualificações

• Minimum 5+ years in application security or secure software development.
• Strong knowledge of SDLC, CI/CD pipelines.
• Experience with application penetration testing.
• Familiarity with OWASP Top 10 and NIST.
• Excellent collaboration and communication with developers.

Responsabilidades

• Drive adoption of enterprise application security standards across applications, platforms and cloud environments.
• Enable automation for vulnerability detection, remediation, exception review and reporting.
• Provide risk-based technical guidance and training to developers on secure design and coding standards (e.g., OWASP).
• Partner with architects, product owners and development teams to embed secure-by-design principles.
• Conduct and validate application security testing (automated and manual) and manage findings from external tests.
• Conduct threat modeling for new apps and major changes.

Conhecimentos

Secure coding

DevSecOps

SDLC

CI/CD

Penetration testing

OWASP

Cloud security

Formação académica

CISSP

OSCP

GIAC GWAPT

OSWP

Ferramentas

SAST

DAST

SCA

Container security

Kubernetes

IaC

Descrição da oferta de emprego

Manulife John Hancock seeks an experienced application security leader to drive secure-by-design practices across the Asia markets. You will embed security into the SDLC, lead threat modeling, and enable automation for vulnerability management in collaboration with developers, architects, and product teams.

You will partner with global security functions to uplift standards and support audit, regulatory, and control assurance activities while nurturing a diverse, inclusive global team.