Senior App Security Engineer — Azure/.NET & AI Safeguards

inriver; Philippines; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

inriver is seeking a Senior Application Security Engineer to own security across the SDLC end-to-end. You will work hands-on with engineering teams to find, fix, and prevent vulnerabilities in a .NET/Azure platform and help secure AI-powered features.

You will lead threat modeling, code reviews, and secure coding practices, while coordinating security tests and incident response with our 24/7 partner teams.

Qualifications

• 8+ years of experience in application security or security-focused software engineering.
• Experience integrating and operating security tooling within CI/CD pipelines.
• Strong .NET (C#) working knowledge; Python reading is a plus.
• Fluency in OWASP Top 10 and API security risks.
• Hands-on Azure experience: resources, networking, secrets management.
• Experience with Auth0 in production environments.

Responsibilities

• Own security in the SDLC end-to-end, hands-on, and independently.
• Build, integrate, and operate SAST, SCA, and DAST in Azure DevOps pipelines with gate checks.
• Secure cloud estate including identity, access management, and secrets management.
• Conduct threat modeling, design reviews, and code reviews before production.
• Evaluate AI feature security, including prompt injection and data leakage risks.
• Define and uphold secure coding standards and enable engineers to perform risk assessments.
• Coordinate penetration tests and vulnerability scans and act on findings.
• Support security incident investigation and response with the incident team.

Skills

Security mindset

CI/CD security

.NET (C#)

Python reading

Azure security

Auth0

Security communication

Threat modeling

Tools

SAST

SCA

DAST

Azure DevOps

Entra ID

Defender for Cloud

Job description

inriver is seeking a Senior Application Security Engineer to own security across the SDLC end-to-end. You will work hands-on with engineering teams to find, fix, and prevent vulnerabilities in a .NET/Azure platform and help secure AI-powered features.

You will lead threat modeling, code reviews, and secure coding practices, while coordinating security tests and incident response with our 24/7 partner teams.