Senior AppSec Engineer — AI-Driven Security & Pen Testing

Manulife; Makati; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Job summary

Manulife is seeking a Security Engineer to strengthen its application security across digital products and financial services. You will lead assessments, drive remediation, and help develop AppSec programs with hands-on coding and automation.

You will work with product and development teams to promote security-by-design, mentor engineers, and translate complex risks into actionable controls while staying ahead of evolving threats in fintech.

Qualifications

• 3–6 years of hands-on application security experience.
• Strong knowledge of OWASP Top 10, OWASP ASVS and testing guides.
• Experience conducting Web/API/AI/ML/Mobile pentesting with listed tools.
• Ability to code AI-powered security automation tools (Python/JS).
• Experience with AI/ML APIs or LLM-based security workflows.
• Demonstrated leadership and ability to influence security outcomes across teams.
• Excellent communication to technical and business stakeholders.
• Background in threat modeling and mobile pentesting.

Responsibilities

• Lead end-to-end application security assessments (SAST, DAST, code reviews, pentesting).
• Conduct web/API/AI/ML/mobile pentesting; document findings for stakeholders.
• Analyze OWASP Top 10 and advanced vulnerabilities (e.g., business logic flaws).
• Design and deploy AI-powered automation tools and security scripts.
• Write maintainable code for internal security tooling and AI workflows.
• Conduct threat modeling for high-risk systems and new initiatives.
• Advise development teams; drive security-by-design and secure coding practices.
• Mentor associate security engineers and share knowledge.
• Produce risk-rated vulnerability reports with remediation guidance.
• Develop and maintain security policies, standards, playbooks, training.

Skills

Security assessments

OWASP knowledge

Penetration testing

Programming (Python/JavaScript)

Leadership

Communication

Tools

Burp Suite Pro

OWASP ZAP

Metasploit

Job description

Manulife is seeking a Security Engineer to strengthen its application security across digital products and financial services. You will lead assessments, drive remediation, and help develop AppSec programs with hands-on coding and automation.

You will work with product and development teams to promote security-by-design, mentor engineers, and translate complex risks into actionable controls while staying ahead of evolving threats in fintech.