Lead Application Security Threat Modeling Engineer

Manulife/John Hancock; Quezon City; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

Manulife/John Hancock is seeking an experienced Application Security Engineer focused on threat modeling to partner with engineering, architecture, product, and risk teams. You will lead threat modeling efforts across applications, APIs, and cloud services, translating risks into actionable mitigations throughout the SDLC.

The role emphasizes governance, stakeholder communication, and continuous improvement of threat libraries and secure design patterns.

Qualifications

• Bachelor’s degree or equivalent practical experience in a related field.
• At least five years of experience in threat modeling, app security, or related domains.
• Experience leading threat modeling or design reviews for APIs, cloud-native systems, or third-party integrations.

Responsibilities

• Lead threat modeling engagements for applications, APIs, cloud services, and third-party integrations.
• Define scope, data flows, trust boundaries, dependencies, and key assumptions with engineering teams.
• Translate threats into actionable security requirements, design changes, tests, and mitigations.

Skills

Threat modeling

Application security

Security architecture

Secure SDLC

Cloud security

Threat modeling tools

Communication

Education

Bachelor’s degree in CS/SE/IT/Cybersecurity

Tools

Microsoft Threat Modeling Tool

IriusRisk

Visio

pytm

OWASP Threat Dragon

Job description

Manulife/John Hancock is seeking an experienced Application Security Engineer focused on threat modeling to partner with engineering, architecture, product, and risk teams. You will lead threat modeling efforts across applications, APIs, and cloud services, translating risks into actionable mitigations throughout the SDLC.

The role emphasizes governance, stakeholder communication, and continuous improvement of threat libraries and secure design patterns.