Senior Full-Stack .Net - Angular (Security Specialist)

Risewave Consulting Inc.; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Risewave Consulting Inc. in Taguig is seeking a Senior Full-Stack .Net - Angular (Security Specialist) to deliver secure software within a Scrum team, participate in ceremonies, and drive security across the stack.

The role emphasizes secure coding, vulnerability remediation with Invicti and Mend, CI/CD security integration, cloud and container security, and collaboration with DevOps, SRE, and platform teams to raise security standards while preserving development velocity.

Qualifications

• 3–5 years of experience in full-stack software engineering with strong application security experience
• Proven hands-on experience with Angular and TypeScript
• Experience with security tools such as Invicti and Mend
• Solid understanding of secure coding practices and OWASP Top 10

Responsibilities

• Participate actively in Scrum ceremonies (sprint planning, refinement, stand-ups, reviews, retrospectives)
• Deliver security enhancements and remediation tasks as part of sprint commitments
• Investigate and remediate vulnerabilities across .NET/C# services, APIs, and web apps
• Secure CI/CD pipelines and implement security controls in cloud and container environments
• Collaborate with DevOps, SRE, and platform teams on security governance and remediation timelines

Skills

Angular / TypeScript

MS SQL Server

Agile / Scrum

Troubleshooting

Education

Bachelor degree

Tools

Invicti

Mend

Penetration testing platforms

Job description

Senior Full-Stack .Net - Angular (Security Specialist)

Risewave Consulting Inc.

Hybrid - Taguig 3-5 Yrs Exp Bachelor Contract

Job Description

Key ResponsibilitiesSecure Full-Stack Delivery (Embedded in Scrum Team)

• Participate actively in Scrum ceremonies including sprint planning, refinement, stand-ups, reviews, and retrospectives.
• Deliver security enhancements and remediation tasks as part of sprint commitments.
• Investigate and remediate vulnerabilities across:
• .NET / C# services, APIs, and web applications
• MS SQL Server databases and related systems
• Both legacy and modern application architectures
• Implement secure coding practices and preventive security controls, including:
• CSRF protection
• Security headers

Vulnerability Remediation & Validation

• Triage, reproduce, and remediate findings from:
• Invicti (DAST)
• Mend (open-source dependency governance and vulnerabilities)
• Internal and external penetration testing reports
• Drive vulnerabilities to closure with supporting evidence such as:
• Pull requests
• Test updates
• Validation scans
• Security verification results

Security Scanning & CI/CD Integration

• Ensure security scans are properly configured and consistently running across repositories, applications, and environments.
• Improve scan effectiveness by:
• Reducing false positives
• Expanding coverage for critical systems
• Build and maintain security controls within CI/CD pipelines, including security gating where appropriate.
• Establish measurable remediation timelines and service-level expectations.
• Partner with DevOps, SRE, and platform teams to strengthen cloud and infrastructure security, including:
• Secure IAM practices (least privilege, role-based access, access reviews)
• Secrets management and credential rotation
• Secure configuration baselines
• Encryption, logging, and monitoring
• Infrastructure-as-Code (IaC) security
• Container and Kubernetes security
• Help ensure cloud and platform changes meet security standards while supporting development velocity.

Collaboration & Technical Leadership

• Provide practical security guidance during architecture discussions, code reviews, and development activities.
• Create reusable secure components, standards, and documentation for engineering teams.
• Partner with engineering leadership on:
• Risk-based remediation planning
• Vulnerability management processes
• Security prioritization and measurable outcomes

Qualifications

• 3–5 years of experience in full-stack software engineering with strong application security experience
• Strong hands-on experience with:
• Angular / TypeScript
• MS SQL Server
• Experience with security tools such as:
• Invicti
• Mend
• Penetration testing platforms
• Solid understanding of:
• Secure coding practices
• OWASP Top 10
• CI/CD security integration
• Cloud and infrastructure security
• Container and Kubernetes security
• Experience working in Agile/Scrum environments
• Strong troubleshooting, collaboration, and communication skills

Tips

Some of our features may not work properly on your device.