Senior Application Security Engineer — WAF & AppSec

Cebu Pacific Air; Pasay; Hybrid; PHP 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Free travel for you and family

Healthcare coverage

Job summary

Cebu Pacific Air is seeking a Senior Engineer, Application Security to join the Digital & Technology Office in Pasay City, Metro Manila. The role focuses on WAF engineering, threat analysis, and secure software practices across web and API platforms.

You will collaborate with SRE, infrastructure, and development teams to strengthen protection while supporting production deployments and ongoing security improvements.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.
• Relevant certifications preferred (e.g., CISSP, CSSLP, CISM, CEH, GIAC, or equivalent).
• 5–10 years of experience in cybersecurity, with strong focus on application security.
• Strong understanding of modern application architectures (APIs, microservices, cloud-native, containers).
• Experience deploying vulnerability assessment tools and remediation programs.
• Experience deploying and managing cloud platforms (AWS, Azure, or GCP) security controls and services preferred.
• Experience in cybersecurity, application security, WAF engineering, perimeter security, or security operations.
• Hands-on experience administering and optimizing enterprise WAF/WAAP, preferably Akamai.
• Strong understanding of web application and API architectures, HTTP/S traffic, vulnerabilities, and mitigations.
• Experience with application security testing tools, vulnerability management, and penetration testing.

Responsibilities

• WAF, Perimeter Security Engineering & Threat Analysis.
• Administer, configure, and optimize WAF/WAAP and perimeter security controls.
• Manage security policies, rules, exceptions, and mitigations for threats.
• Analyze HTTP/S traffic and WAF events to investigate threats and attacks.
• Validate suspected attacks, perform root-cause analysis, and tune mitigations.
• Configure edge security capabilities: CDN settings, origin protection, bot mitigation, IP reputation, API security.
• Manage SSL/TLS certificates and configurations across edge and origin.
• Support security onboarding, changes, testing, and deployments for apps.
• Evaluate security control effectiveness and identify improvements.
• Operate application security testing: SAST, DAST, and related tools.
• Coordinate vulnerability assessments and penetration testing activities.
• Assess findings and prioritize remediation with development teams.
• Establish security standards, testing requirements, and remediation workflows.
• Support secure software development practices and integration into release processes.
• Explore application hardening and code obfuscation where appropriate.
• Contribute to standardization and improvement of security tools and processes.
• Develop and maintain security configuration standards and incident runbooks.
• Coordinate with SRE, infrastructure, and development teams for security operations.
• Support audit and compliance requirements with technical evidence and docs.

Education

Bachelor’s degree in Computer Science, Information Security, Engineering, or related field

Tools

Akamai

Job description

Cebu Pacific Air is seeking a Senior Engineer, Application Security to join the Digital & Technology Office in Pasay City, Metro Manila. The role focuses on WAF engineering, threat analysis, and secure software practices across web and API platforms.

You will collaborate with SRE, infrastructure, and development teams to strengthen protection while supporting production deployments and ongoing security improvements.