VP Application Security

Hrtx; Taguig; On-site; PHP 400,000 - 700,000; Full time

Job summary

A leading security firm in Taguig is seeking an experienced Application Security Head to lead secure development initiatives and manage a team of security professionals. The ideal candidate will have over 10 years of experience in application security and at least 3 years in a leadership role. Responsibilities include overseeing security programs, conducting application security testing, and collaborating with cross-functional teams to integrate secure coding practices. This role is exclusively for Filipino citizens currently residing in the Philippines.

Qualifications

• 10+ years of experience in application security, with at least 3+ years in a leadership role.
• Strong knowledge of application security testing methodologies and tools.
• Proven experience with application security tools.
• Deep understanding of OWASP Top 10, secure coding practices, and software security standards
• Proven experience with application security tools (Veracode, Checkmarx, Burp Suite, Fortify)
• Familiarity with modern architectures such as microservices, containers, APIs
• Experience collaborating across engineering, DevOps, and product teams to drive secure development practices
• Excellent communication, leadership, and stakeholder management skills

Responsibilities

• Lead the application security function, providing guidance to the team.
• Design, implement, and oversee the application security program.
• Manage and conduct application security testing across multiple projects.
• Partner with engineering, DevOps, and product teams to embed secure coding practices throughout the SDLC.
• Evaluate, implement, and maintain application security tools such as Veracode, Checkmarx, Burp Suite, Fortify, and others.
• Collaborate with developers and architects to secure modern application architectures, including microservices, containers, and APIs.
• Provide expert guidance on the OWASP Top 10 and other common vulnerabilities.
• Monitor emerging threats, vulnerabilities, and security trends to continuously enhance the security posture.
• Drive remediation and risk mitigation efforts, ensuring compliance with internal and external standards.
• Report on application security metrics and program effectiveness to senior leadership.

Skills

Application security testing

Leadership

Secure coding practices

Communication skills

SAST

DAST

IAST

RASP

Veracode

Checkmarx

Burp Suite

Fortify

Microservices

Containers

APIs

DevOps

SDLC

Tools

Veracode

Checkmarx

Burp Suite

Fortify

Job description

Seeking for an experienced Application Security Head to drive our secure development initiatives and lead a team of security professionals. The ideal candidate will have a strong technical background in application security, hands‑on expertise with security testing tools, and proven leadership experience in building and managing security programs for modern application environments.

Responsibilities

• Lead the application security function, providing guidance and mentorship to the team.
• Design, implement, and oversee the application security program, including policies, standards, and best practices.
• Manage and conduct application security testing (SAST, DAST, IAST, RASP) across multiple projects.
• Partner with engineering, DevOps, and product teams to embed secure coding practices throughout the software development lifecycle (SDLC).
• Evaluate, implement, and maintain application security tools such as Veracode, Checkmarx, Burp Suite, Fortify, and others.
• Collaborate with developers and architects to secure modern application architectures, including microservices, containers, and APIs.
• Provide expert guidance on the OWASP Top 10 and other common vulnerabilities.
• Monitor emerging threats, vulnerabilities, and security trends to continuously enhance the security posture.
• Drive remediation and risk mitigation efforts, ensuring compliance with internal and external standards.
• Report on application security metrics and program effectiveness to senior leadership.

Requirements

• 10+ years of experience in application security, with at least 3+ years in a leadership role.
• Strong knowledge of application security testing methodologies and tools (SAST, DAST, IAST, RASP).
• Deep understanding of OWASP Top 10, secure coding practices, and software security standards.
• Proven experience with application security tools (e.g., Veracode, Checkmarx, Burp Suite, Fortify).
• Familiarity with modern architectures such as microservices, containers, APIs.
• Experience collaborating across engineering, DevOps, and product teams to drive secure development practices.
• Excellent communication, leadership, and stakeholder management skills.

For FILIPINO CITIZEN WHO IS CURRENTLY in the PHILIPPINESONLY