Strategic Application Security Enablement Engineer

Manulife; Philippines; Hybrid; PHP 2,400,000 - 4,200,000; Full time

Job summary

Manulife is seeking an experienced Asia-focused Application Security professional to lead secure development and enablement across the SDLC in Asia markets. You will drive threat modeling, testing, and adoption of enterprise security standards within CI/CD pipelines and DevSecOps.

The role emphasizes collaboration with architects, product owners, and development teams to embed secure-by-design principles and provide guidance on OWASP and secure coding practices.

Qualifications

• Minimum 5+ years in application security or software development roles with a focus on secure coding and DevSecOps.
• Strong understanding of application security principles, SDLC, and CI/CD pipelines.
• Strong understanding of application penetration testing.
• Knowledge of secure coding standards and frameworks (e.g., OWASP Top 10, NIST).
• Excellent collaboration and communication skills to engage developers and stakeholders.

Responsibilities

• Help drive adoption of enterprise application security standards across applications, platforms, and cloud environments.
• Enable automation for vulnerability detection, remediation, exception review and reporting to improve efficiency and consistency.
• Provide actionable, risk-based technical guidance and training to developers on secure design and coding standards (e.g., OWASP).
• Partner with architects, product owners, and development teams during design and planning phases to embed secure-by-design principles.
• Conduct and validate application security testing (automated and manual), including intake and validation of findings from external penetration tests and bug bounty programs.

Skills

App security

Secure coding

SDLC CI/CD

Penetration testing

Cloud security

Collaboration

Communication

Education

OSCP

CISSP

GWAPT

Tools

Secrets management

SCA

SAST

Container security

DAST

Kubernetes

IaC

Job description

Manulife is seeking an experienced Asia-focused Application Security professional to lead secure development and enablement across the SDLC in Asia markets. You will drive threat modeling, testing, and adoption of enterprise security standards within CI/CD pipelines and DevSecOps.

The role emphasizes collaboration with architects, product owners, and development teams to embed secure-by-design principles and provide guidance on OWASP and secure coding practices.