Senior App Security Engineer - Red/Blue Team

Azeus Group; Pasig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Azeus Group is seeking an experienced Application Security Engineer to lead red team engagements and strengthen security across Web and Mobile platforms. The role emphasizes hands-on testing, vulnerability management, and collaboration with engineering and DevOps to embed security into the SDLC.

You will conduct technical investigations, help in security awareness, and support certification efforts (ISO 27001, SOC Type 2). This position requires strong ownership and practical security expertise.

Qualifications

• 5+ years of experience in application security testing and assessments.
• Solid understanding of cybersecurity principles, standards and protocols (OWASP Top 10, SANS CSC).
• Experience with security tools: Burp Suite, OWASP ZAP, Metasploit, SonarQube (Ghidra/IDA a plus).
• Experience with Java, JavaScript, C/C++.
• Cloud knowledge (AWS) and SIEM familiarity are preferred.

Responsibilities

• Perform penetration testing of Web and Mobile applications across platforms.
• Own the vulnerability management lifecycle from identification to remediation and reporting.
• Monitor and detect operational security risks in the organization.
• Conduct technical investigations on security incidents and tools.
• Collaborate with users during Pre-sales and Support on security inquiries.
• Engage with Blue Team to implement security best practices and automate vulnerability detection in SDLC.
• Review risks and patches of software components; facilitate threat modelling in SDLC.
• Assist in security awareness training and support ISO 27001 and SOC Type 2 controls.

Skills

Penetration testing

Vulnerability management

Threat modelling

Incident response

DevSecOps

Tools

Burp Suite

OWASP ZAP

Metasploit

SonarQube

Ghidra

Job description

Azeus Group is seeking an experienced Application Security Engineer to lead red team engagements and strengthen security across Web and Mobile platforms. The role emphasizes hands-on testing, vulnerability management, and collaboration with engineering and DevOps to embed security into the SDLC.

You will conduct technical investigations, help in security awareness, and support certification efforts (ISO 27001, SOC Type 2). This position requires strong ownership and practical security expertise.