Senior AppSec Engineer: Secure SDLC in Azure & AI

Inriver; Davao City; On-site; PHP 2,500,000 - 3,500,000; Full time

Job summary

Inriver in Davao City is seeking a Senior Application Security Engineer to own security across the software development lifecycle. You will work hands-on with engineering teams to find, fix, and prevent vulnerabilities in a .NET/Azure‑based platform while focusing on secure AI features.

You will implement SAST/DAST in CI/CD, perform threat modeling and code reviews, and drive secure coding practices across product squads.

Qualifications

• 8+ years of experience in application security or security-focused software engineering.
• Experience integrating security tooling within CI/CD pipelines.
• Strong .NET (C#) skills; reading Python helpful.
• Fluent in OWASP Top 10 and API security risks.
• Hands-on Azure experience including identity, networking, and secrets management.
• Hands-on experience with Auth0 in production.
• Excellent communication and ability to influence engineers.
• Pragmatic, risk-based mindset balancing security with delivery.

Responsibilities

• Identify, triage, and drive security findings to closure through the product teams' Azure DevOps backlogs with severity-based SLAs.
• Build, integrate, and operate SAST, SCA, and DAST in Azure DevOps pipelines, including PR gating on new critical and high findings, secret scanning, and automated routing of findings to tickets.
• Secure our cloud estate across identity and access management, network configuration, secrets management, and workload protection, using Defender for Cloud policies.
• Conduct threat models, design reviews, and code reviews for new and existing services with a threat model in place before production.
• Evaluate security and privacy implications of AI features, including prompt injection, data leakage, and model misuse, and define controls.
• Define and uphold secure coding standards, train engineers, and build a security champion in each product team.
• Coordinate penetration tests and application vulnerability scanning, review findings, and implement fixes hands-on.
• Support security incident investigation and response as the application SME with our MDR partner.

Skills

Application security

CI/CD security tooling

Azure security

Auth0

Communication

Tools

.NET (C#)

Azure DevOps

SAST/DAST tooling

Entra ID

Secret management tooling

Job description

Inriver in Davao City is seeking a Senior Application Security Engineer to own security across the software development lifecycle. You will work hands-on with engineering teams to find, fix, and prevent vulnerabilities in a .NET/Azure‑based platform while focusing on secure AI features.

You will implement SAST/DAST in CI/CD, perform threat modeling and code reviews, and drive secure coding practices across product squads.