Senior AppSec Engineer (Java/.NET) - Hybrid, Manila

Private Advertiser; Metro Manila; Hybrid; PHP 1,726,000 - 2,068,000; Full time

Job summary

Private Advertiser is seeking an experienced Senior Application Security Engineer to strengthen application security across the software development lifecycle. This is a hands‑on, technical role focused on identifying and addressing vulnerabilities, integrating security into development processes, and ensuring secure design, development, and deployment.

The ideal candidate has a strong background in end‑to‑end application security, with development experience in Java or C#/.NET.

Qualifications

• 8+ years combined software development and application security experience.
• 3+ years hands-on, end-to-end application security across SDLC.
• Strong background in Java and/or C#/.NET development.
• Experience with SAST, DAST, SCA and secret scanning tools.

Responsibilities

• Manage app security across the SDLC from design to deployment.
• Implement, configure, and maintain SAST/DAST/SCA and secret scanning.
• Integrate automated security scanning and gates into CI/CD pipelines.
• Identify, assess, prioritize, and track vulnerabilities through remediation and verification.
• Conduct threat modeling, security architecture reviews, and secure code reviews.
• Collaborate with developers to resolve security issues and promote secure coding practices.
• Strengthen Azure cloud security controls and related authentication/identity management implementations.
• Coordinate penetration testing activities and ensure remediation.
• Promote OWASP best practices and secure development standards.
• Support security incident investigations and remediation activities.
• Assess AI/LLM application security risks.

Skills

End-to-end App Sec

Java

C#/.NET

CI/CD Integration

Azure DevOps

OWASP Top 10

Threat Modeling

Azure Cloud/Security

Tools

Fortify

Veracode

Checkmarx

SonarQube

Burp Suite

Job description

Private Advertiser is seeking an experienced Senior Application Security Engineer to strengthen application security across the software development lifecycle. This is a hands‑on, technical role focused on identifying and addressing vulnerabilities, integrating security into development processes, and ensuring secure design, development, and deployment.

The ideal candidate has a strong background in end‑to‑end application security, with development experience in Java or C#/.NET.