Senior App & Cloud Security Engineer

Voyse Limited; Manila; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Financial Times is seeking a Senior Cyber Security Engineer to mature application and cloud security across AWS-hosted environments. The role focuses on guardrails, threat modelling, vulnerability management and automation, partnering with product and engineering teams to embed security by default.

The ideal candidate will demonstrate hands-on experience across SAST, SCA, secret scanning, and IaC scanning, with strong communication and leadership abilities.

Qualifications

• Strong experience in both application security and cloud security across AWS-hosted environments.
• Hands-on AWS security experience with common misconfiguration patterns.
• Experience improving vulnerability management across engineering teams.
• Experience improving cloud/IaC misconfiguration management at scale.
• Experience integrating/tuning security tooling in CI/CD workflows (SAST, SCA, secret scanning, IaC scanning).
• Ability to run threat-modelling sessions that influence design and remediation decisions.
• Ability to write scripts/tools (Python preferred) to automate security workflows.
• Strong communication and collaboration skills to influence engineers and leaders.
• Familiarity with Agile/Scrum practices.

Responsibilities

• Improve application security guardrails across CI/CD and development pipelines.
• Improve cloud and IaC security guardrails and misconfiguration remediation at scale.
• Drive vulnerability management including triage, prioritisation and remediation.
• Run practical threat modelling sessions for new products and changes.
• Build automation/tools/dashboards to reduce toil and surface risk.
• Support secure architecture decisions and design reviews.
• Partner with product, platform and software engineering teams to embed security.
• Mentor security engineers and guide engineering teams on practical security approaches.

Skills

Application security

Cloud security

AWS security

Vulnerability management

IaC security

CI/CD tooling

Threat modelling

Python scripting

Security leadership

Communication

Agile/Scrum

AI for AppSec

Tools

SAST

Software Composition Analysis

Secret scanning

IaC scanning

Job description

Financial Times is seeking a Senior Cyber Security Engineer to mature application and cloud security across AWS-hosted environments. The role focuses on guardrails, threat modelling, vulnerability management and automation, partnering with product and engineering teams to embed security by default.

The ideal candidate will demonstrate hands-on experience across SAST, SCA, secret scanning, and IaC scanning, with strong communication and leadership abilities.