Senior Application Security Engineer - WAF&Threat Analysis

Cebu Pacific Air; Pasay; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Free travel for you and your family

Comprehensive healthcare coverage

Learning programs and leadership dev

Job summary

Cebu Pacific Digital & Technology Office in Pasay City seeks a Senior Engineer, Application Security to lead WAF/WAAP and perimeter security for internet-facing apps and APIs. You will analyze HTTP/S traffic, configure security controls, and coordinate vulnerability assessments in a hybrid work environment.

The role emphasizes secure software development practices, incident response, and collaboration with engineering, SRE, and operations to continuously improve security posture.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.
• 5–10 years of experience in cybersecurity, with strong focus on application security.
• Experience deploying vulnerability assessment tools and remediation programs.
• Experience with cloud security controls on AWS, Azure, or GCP.

Responsibilities

• WAF, Perimeter Security Engineering & Threat Analysis.
• Administer, configure, and optimize WAF/WAAP and perimeter security for internet-facing apps and APIs.
• Manage security policies, rules, exceptions, and mitigations for emerging threats.
• Analyze HTTP/S traffic and WAF events to identify attacks and anomalies.
• Validate attacks and false positives; perform root-cause analysis and tuning.
• Configure edge security capabilities including CDN, bot mitigation, IP reputation, and API protections.
• Manage SSL/TLS certificates and secure configurations across edge and origin.
• Support security onboarding, testing, and production deployments for apps.
• Evaluate security control effectiveness using threats and metrics to drive improvements.
• Coordinate vulnerability assessments, PIA testing, remediation tracking, and retesting.
• Establish application security standards and remediation workflows.

Skills

WAF security

Perimeter security engineering

Threat analysis

HTTP/S traffic analysis

Software security

Security incident response

Vendor management

Education

Bachelor’s degree in Computer Science, Information Security, Engineering, or related field

Tools

CISSP

CSSLP

CISM

CEH

GIAC

Job description

Cebu Pacific Digital & Technology Office in Pasay City seeks a Senior Engineer, Application Security to lead WAF/WAAP and perimeter security for internet-facing apps and APIs. You will analyze HTTP/S traffic, configure security controls, and coordinate vulnerability assessments in a hybrid work environment.

The role emphasizes secure software development practices, incident response, and collaboration with engineering, SRE, and operations to continuously improve security posture.