Senior App Security Engineer – CI/CD & Secure Coding

GCash; Metro Manila; Presencial; PHP 1.500.000 - 2.100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career growth

Competitive compensation

Flexible benefits

Descripción de la vacante

GCash is seeking an experienced security-focused engineer to advance secure development practices across our applications in the Philippines. Your role will drive SAST/DAST, dependency scanning, and secure coding standards while collaborating with developers and DevOps teams to embed security into CI/CD pipelines.

You will also conduct code reviews for high-risk features, stay ahead of emerging threats, and train engineers on secure coding practices to maintain our leading FinTech platform.

Formación

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 5+ years in application security or software development with a strong focus on security.
• Proficiency in Python, Java, and JavaScript; strong security testing tooling experience.

Responsabilidades

• Perform SAST/DAST and dependency scanning; provide remediation guidance.
• Develop and maintain secure coding standards and guidelines.
• Conduct manual code reviews for high-risk applications or critical features.
• Configure and manage application security tools; automate security testing in CI/CD pipelines.
• Collaborate with developers and DevOps to embed security into workflows; provide training on secure coding.

Conocimientos

Python

Java

JavaScript

Security testing

CI/CD integration

Cloud-native security

Container security

OWASP Top 10

Strong communication

Analytical thinking

Educación

Bachelor's degree in Computer Science or Information Security

Herramientas

SAST

DAST

Dependency scanning

Descripción del empleo

GCash is seeking an experienced security-focused engineer to advance secure development practices across our applications in the Philippines. Your role will drive SAST/DAST, dependency scanning, and secure coding standards while collaborating with developers and DevOps teams to embed security into CI/CD pipelines.

You will also conduct code reviews for high-risk features, stay ahead of emerging threats, and train engineers on secure coding practices to maintain our leading FinTech platform.