Security Analyst

Aon plc; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Aon plc is seeking a Security Analyst to oversee security aspects of technology products, projects, and initiatives. You will collaborate with cross-functional teams to ensure delivery aligns with security controls and best practices.

The ideal candidate is a strategic thinker with deep security knowledge, strong communication, and the ability to translate findings into actionable remediation for developers. This role emphasizes SDLC security and collaboration with multiple stakeholders globally.

Qualifications

• Minimum 3 years of experience as a security analyst in the technology industry.
• Understanding of secure coding practices, OWASP Top 10, and common application security weaknesses (CWE).
• Experience reviewing and interpreting SAST, DAST, and Software Composition Analysis (SCA) findings and translating them into actionable remediation guidance for developers.
• Hands‑on vulnerability management experience across applications, APIs, servers and supporting infrastructure.
• Experience reviewing and coordinating remediation from tools such as Snyk, WIZ and Invicti.
• Authentication and access-control experience, including MFA, Okta/OIDC/OAuth and service authentication.
• Experience with API security and Azure API Management security controls.
• Understanding of certificates, secrets, password management and privileged access.
• Ability to assess vulnerabilities, explain risk, prioritize remediation and track issues to closure.
• Experience working with development, infrastructure, security and support teams.
• Understanding of security exceptions, risk acceptance and remediation evidence.
• Strong written communication and documentation skills.

Responsibilities

• Understand and document the security components within the assigned portfolio.
• Work with the APAC delivery leads to manage and deliver application security.
• Participate in the Scrum Agile development teams as the security expert.
• Work with wider security stakeholders to understand and react to an ever-changing security landscape.
• Work with the relevant product managers, architects and developers around all aspects of security.
• Ensure GSS are fully engaged around all relevant aspects of the application and any changes.

Skills

Security analyst experience

Secure coding

OWASP Top 10

SAST/DAST/SCA remediation

Vulnerability management

Snyk/WIZ/Invicti

Authentication controls

API security

Secrets management

Risk assessment

Cross-functional collaboration

Written communication

Tools

Snyk

WIZ

Invicti

Azure DevOps

Job description

Security Analyst

ID: 2582944

Aon is in the business of better decisions.

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

What the day will look like

As a Security Analyst, you will be responsible for overseeing and driving the security aspects of technology products, projects and initiatives. You will collaborate closely with cross-functional teams to ensure the successful delivery and adherence to Aon's security controls. The ideal candidate is a strategic thinker, a strong communicator, and possesses a deep understanding of security, technology and best practices.

• Understand and document the security components within the assigned portfolio.
• Work with the APAC delivery leads to manage and deliver application security.
• Participate in the Scrum Agile development teams as the security expert.
• Work with wider security stakeholders to understand and react to an ever-changing security landscape.
• Work with the relevant product managers, architects and developers around all aspects of security.
• Ensure GSS are fully engaged around all relevant aspects of the application and any changes.

Skills and experience that will lead to success

Must Have:

• Proven experience as a security analyst in the technology industry – minimum 3 years of experience.
• Understanding of secure coding practices, OWASP Top 10, and common application security weaknesses (CWE).
• Experience reviewing and interpreting SAST, DAST, and Software Composition Analysis (SCA) findings and translating them into actionable remediation guidance for developers.
• Hands‑on vulnerability management experience across applications, APIs, servers and supporting infrastructure.
• Experience reviewing and coordinating remediation from tools such as Snyk, WIZ and Invicti.
• Authentication and access-control experience, including MFA, Okta/OIDC/OAuth and service authentication.
• Experience with API security and Azure API Management security controls.
• Understanding of certificates, secrets, password management and privileged access.
• Ability to assess vulnerabilities, explain risk, prioritize remediation and track issues to closure.
• Experience working with development, infrastructure, security and support teams.
• Understanding of security exceptions, risk acceptance and remediation evidence.
• Strong written communication and documentation skills.

Nice To Have:

• Familiarity with software development lifecycles (SDLC) and modern development frameworks such as .NET, Java, or Node.js.
• Exposure to DevSecOps practices and CI/CD pipelines (e.g., Azure DevOps).
• Exposure to insurance (e.g. placement, policy, claims, underwriting, billing) or the broader financial services systems.
• Understanding of cybersecurity, technology risk, and compliance requirements in regulated environments (e.g. insurance or financial services).
• Experience working in virtual, distributed teams across multiple countries, using modern collaboration and video conferencing tools.

How we support our colleagues

In addition to our comprehensive benefits package, we encourage a diverse workforce. Plus, our agile, inclusive environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions, but we also recognise that flexibility goes beyond just the place of work... and we are all for it. We call this Smart Working!

Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued.

Aon values an innovative, diverse workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace.

Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status.

2582944