Application Security Enablement Engineer
Description
Salary: ₱90,000 – ₱100,000 per month
About the role
We are looking for an experienced Application Security Enablement Engineer to drive the adoption of application security standards across enterprise applications, development platforms, and cloud environments. The successful candidate will work closely with software developers, architects, and engineering teams to integrate security practices into the Software Development Life Cycle (SDLC) and CI/CD pipelines. This role focuses on vulnerability management, threat modeling, secure coding, application security testing, and DevSecOps automation to strengthen the organization's overall security posture.
Key responsibilities
Drive the adoption of enterprise application security standards across applications, platforms, and cloud environments.
Integrate security practices into the Software Development Life Cycle (SDLC) and CI/CD pipelines.
Conduct application-level and architecture-level Threat Modeling for new applications and major system enhancements.
Support vulnerability management, including vulnerability assessment, triage, remediation, exception handling, and reporting.
Perform and validate application security testing, including automated and manual penetration testing.
Review and validate security findings from external penetration tests and bug bounty programs.
Provide technical guidance to developers on secure coding practices and security frameworks, particularly OWASP.
Automate vulnerability detection, remediation tracking, and security reporting.
Support the implementation and improvement of SAST, DAST, SCA, secrets management, and container security solutions.
Collaborate with application developers, architects, product owners, and global security teams to implement secure-by-design principles.
About you
Minimum of 5 years of experience in Application Security, Software Development, or related Information Security roles.
Strong knowledge of Application Security principles, Secure SDLC, and DevSecOps practices.
Hands-on experience with application penetration testing and vulnerability assessment.
Strong understanding of secure coding standards and frameworks, particularly OWASP Top 10 and NIST.
Experience integrating security tools into CI/CD pipelines.
Knowledge of vulnerability management, threat modeling, and security remediation processes.
Excellent communication and collaboration skills, with the ability to work closely with developers and technical stakeholders.
Hands-on experience with security tools and technologies such as SAST, DAST, SCA, Secrets Management, Container Security, and WAF.
Exposure to API Security, Kubernetes, Docker, and container platforms.
Knowledge of Infrastructure as Code (IaC) security and hybrid cloud environments.
