Senior App Security Engineer: Pen Tests & DevSecOps

Azeus Convene; Pasig; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Azeus Convene is seeking a Security Engineer in Pasig, Philippines, to lead penetration testing of Web and Mobile apps and own the vulnerability management lifecycle. You will monitor security risks and conduct investigations across the organization.

You will collaborate with the Blue and Red teams, help implement security best practices with engineering/DevOps, and contribute to compliance efforts for ISO 27001 and SOC Type 2 while supporting security awareness programs.

Qualifications

• At least 5 years of experience in application security testing and assessments.
• Solid understanding of cybersecurity principles, standards, and protocols such as OWASP Top 10 and SANS Critical Security Controls.
• Experience with programming languages such as Java, JavaScript, C/C++.
• Experience with scripting languages such as Bash or PowerShell.
• Experience and knowledge of cloud solutions and architectures such as AWS.
• Experience and knowledge of Security Information and Event Management (SIEM) technologies.
• Good analytical skills.
• Strong sense of ownership.
• Technical and industry certifications such as CISA, CISM, CISSP are a plus.

Responsibilities

• Perform penetration testing of Web and Mobile (iOS, Android, Windows, and Mac) applications
• Own the vulnerability management lifecycle from identification, remediation to reporting
• Active monitoring and detection of operational security risks in the organization
• Conduct technical investigations on security incidents and tools
• Liaise directly with users on security enquiries and concerns during Pre-sales and Support
• Work with engineering and DevOps teams to implement security best practices
• Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle
• Review risks and patches of software components used in the applications
• Facilitate threat modelling as part of the software development lifecycle
• Help in security awareness training
• Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2

Skills

Application security testing

OWASP Top 10

Cloud (AWS)

SIEM

Burp Suite

OWASP ZAP

Metasploit

Scripting (PowerShell/Bash)

Tools

Burp Suite

OWASP ZAP

Metasploit

SonarQube

Ghidra

Job description

Azeus Convene is seeking a Security Engineer in Pasig, Philippines, to lead penetration testing of Web and Mobile apps and own the vulnerability management lifecycle. You will monitor security risks and conduct investigations across the organization.

You will collaborate with the Blue and Red teams, help implement security best practices with engineering/DevOps, and contribute to compliance efforts for ISO 27001 and SOC Type 2 while supporting security awareness programs.