Senior Application Security Engineer (SSDLC, CI/CD)

IntouchCX; Mabalacat; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

IntouchCX is seeking a Senior Application Security Specialist to assess and secure web-based, in-house developed apps and open-source telephony solutions. You will collaborate with security analysts and develop in-house tools to support threat monitoring, vulnerability management, and security control administration.

Responsibilities include code reviews, automated scanning, CI/CD integration, and providing security reviews in ticket workflows.

Qualifications

• Bachelor’s degree or 5 years of comparable work experience.
• Security certifications such as CISSP, C|ASE, GPEN, or OSCP.
• Professional experience in conducting application security assessments and penetration testing.
• Experience with .NET (C#), Python, and ASP.
• Experience with penetration testing tools (Burp Suite, ZAP, SQLMap).
• Experience deploying tools that integrate with CI/CD pipelines.
• Familiarity with agile coding practices, OWASP, and related frameworks.

Responsibilities

• Assess software and applications for security vulnerabilities through code reviews, automated scanning, fuzzing, and manual inspection.
• Work with the development team and participate in developer sprint planning to identify potential security impacts and mitigation strategies.
• Develop, implement, and manage tools and processes to aid in software security testing activities (SAST, DAST, IAST).
• Provide security reviews and approvals as part of ticketed code-release workflows.
• Implement and manage automated vulnerability scanning tools in the development CI/CD pipeline.
• Champion the development, implementation, and operationalization of a Security Software Development Lifecycle (SSDLC).
• Document and communicate found issues to the developer or infrastructure teams.
• Work with the security team to identify methods to bolster threat detection and prevention based on discovered issues.
• Liaison with contracted third parties to perform application security assessments.
• Attend client meetings and respond to client questionnaires to address inquiries related to secure development practices.

Skills

Application security assessments

Penetration testing

CI/CD integration

OWASP guidelines

AGILE development

OWASP Testing Project

SSDLC awareness

Education

Bachelor’s degree or equivalent in CS / InfoSec

Certifications: CISSP/C|ASE/GPEN/OSCP

Tools

.NET (C#)

Python

ASP

Burp Suite

ZAP

SQLMap

Job description

IntouchCX is seeking a Senior Application Security Specialist to assess and secure web-based, in-house developed apps and open-source telephony solutions. You will collaborate with security analysts and develop in-house tools to support threat monitoring, vulnerability management, and security control administration.

Responsibilities include code reviews, automated scanning, CI/CD integration, and providing security reviews in ticket workflows.