Threat Modeling Lead - Application Security (Hybrid)

Manulife group; Quezon City; Hybrid; PHP 900,000 - 1,700,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Manulife is seeking an experienced Application Security Engineer specializing in Threat Modeling to join our Global Cybersecurity Services (GCS) team. This individual-contributor role partners with engineering, architecture, product and risk teams to identify design risks early and translate them into security requirements across the SDLC.

You will lead threat modeling engagements, document data flows and trust boundaries, and translate threats into practical mitigations.

Qualifications

• Bachelor’s degree in CS, IT, Cybersecurity or related field or equivalent practical experience.
• Minimum 5 years in threat modeling, application security, or security architecture.
• Experience leading threat modeling or secure design reviews for modern systems.

Responsibilities

• Lead threat modeling engagements for applications, APIs, cloud services and integrations.
• Document system components, data flows, trust boundaries and dependencies.
• Translate threats into actionable security requirements and mitigations.
• Coach delivery teams and drive re-use of threat modeling practices.
• Produce metrics and reporting on threat modeling outcomes.

Skills

Threat modeling

Security architecture

Secure SDLC

Facilitation

Stakeholder management

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Threat Modeling Tool

OWASP Threat Dragon

IriusRisk

pytm

Visio

Job description

Manulife is seeking an experienced Application Security Engineer specializing in Threat Modeling to join our Global Cybersecurity Services (GCS) team. This individual-contributor role partners with engineering, architecture, product and risk teams to identify design risks early and translate them into security requirements across the SDLC.

You will lead threat modeling engagements, document data flows and trust boundaries, and translate threats into practical mitigations.