DevSecOps AppSec Engineer (Azure)

Recruitify_HR; Quezon City; Hybrid; PHP 1,339,000 - 2,009,000; Full time

Benefits offered by this job

Joining bonus

Job summary

Recruitify_HR seeks an Application Security Engineer/Lead to embed security into the software delivery lifecycle across cloud and containerized environments. You will collaborate with engineering, DevOps, and product teams to implement DevSecOps controls in Azure DevOps pipelines and drive secure‑by‑design practices.

The role leads testing programs (SAST/DAST/SCA/IAST/RASP), threat modeling, vulnerability triage, and secure coding guidance, while improving security posture without slowing

Qualifications

• Open to candidates with right to work in the Philippines.
• Minimum 2 years of professional security experience.
• Experience with Android malware reverse is required.

Responsibilities

• Embed security into the SDLC with engineering and DevOps partners.
• Lead security testing programs: SAST, DAST, SCA, IAST, RASP.
• Integrate security scanning into Azure DevOps pipelines.
• Coordinate security penetration testing and remediation verification.
• Lead threat modeling and secure design reviews for new features.
• Establish vulnerability triage workflows and KPI reporting.
• Provide secure coding guidance and establish secure coding standards.
• Support cloud security posture across Azure, AWS, and GCP.
• Build dashboards to report coverage and remediation progress.

Skills

DevSecOps

CI/CD

Azure DevOps

Cloud security

Threat modeling

Tools

Azure DevOps

SAST tools

DAST tools

SCA tools

OWASP ZAP

Job description

Recruitify_HR seeks an Application Security Engineer/Lead to embed security into the software delivery lifecycle across cloud and containerized environments. You will collaborate with engineering, DevOps, and product teams to implement DevSecOps controls in Azure DevOps pipelines and drive secure‑by‑design practices.

The role leads testing programs (SAST/DAST/SCA/IAST/RASP), threat modeling, vulnerability triage, and secure coding guidance, while improving security posture without slowing