Application Security Specialist

Flat Planet is partnering with a globally recognized financial services organization that is expanding its cybersecurity and technology capabilities in the Philippines. As part of its continued investment in secure software development, cloud transformation, and enterprise application security, the company is seeking an Application Security Specialist to join its growing security and engineering team.

This is an exciting opportunity to work on enterprise-scale applications, cloud-native technologies, and regional security initiatives while collaborating with global engineering, architecture, risk, and cybersecurity teams.

Job Summary

The Application Security Specialist will be responsible for embedding security throughout the Software Development Life Cycle (SDLC), driving secure-by-design principles, and strengthening application security practices across multiple markets and technology platforms.

The role will work closely with developers, architects, product owners, and security stakeholders to implement DevSecOps practices, conduct threat modeling, manage application vulnerabilities, and enable secure software delivery across cloud, containerized, and hybrid environments.

Job Description

DevSecOps Integration

• Embed secure coding practices into software development workflows and CI/CD pipelines.

• Implement and maintain automated security controls, including:

  • Static Application Security Testing (SAST)

  • Dynamic Application Security Testing (DAST)

  • Software Composition Analysis (SCA)

  • Secrets Scanning

• Partner with engineering teams to integrate security tooling into development and deployment processes.

• Promote continuous security testing and automation throughout the SDLC.

Threat Modeling & Secure Design

• Conduct architecture-level threat modeling for:

  • New applications and services

  • Platform upgrades

  • High-risk technology changes

  • Major software releases

• Facilitate secure design reviews and security architecture assessments.

• Develop threat models and risk mitigation strategies using standardized frameworks and playbooks.

• Ensure security requirements are incorporated early in the development lifecycle.

Vulnerability & Penetration Testing Management

• Lead vulnerability triage, risk contextualization, and remediation tracking activities.

• Manage findings from:

  • Application security assessments

  • Penetration tests

  • Bug bounty programs

  • Security reviews

• Collaborate with development teams to prioritize and remediate vulnerabilities.

• Track remediation progress and reporting to key stakeholders.

Developer Enablement & Security Advocacy

• Provide technical guidance on secure coding and application security best practices.

• Deliver secure coding awareness sessions and developer-focused training.

• Promote adherence to:

  • OWASP Top 10

  • NIST Security Standards

  • Secure SDLC Practices

• Serve as a trusted security advisor to development and engineering teams.

Security Governance & Risk Management

• Support risk-based exception reviews and security governance processes.

• Assist with vulnerability prioritization and remediation planning.

• Ensure compliance with internal security policies and regulatory requirements.

• Support security initiatives across cloud, containerized, and hybrid environments.

Skills & Experience

Required

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.

• 5+ years of hands-on experience in:

  • Application Security

  • Application Penetration Testing

  • Secure Software Engineering

• Strong expertise in:

  • OWASP Top 10

  • NIST Security Frameworks

  • Threat Modeling

  • Secure SDLC Controls

  • Application Security Principles

• Deep understanding of:

  • CI/CD Security

  • API Security

  • Container Security

  • Kubernetes Security

  • Infrastructure as Code (IaC)

  • Web Application Firewalls (WAF)

• Experience managing vulnerability remediation and application security testing programs.

• Excellent stakeholder management and communication skills.

Preferred

• Experience supporting enterprise-scale application security programs.

• Exposure to cloud-native and containerized environments.

• Experience driving DevSecOps initiatives within complex organizations.

• Background in financial services, insurance, banking, or highly regulated industries.

• Experience partnering with global engineering and security teams.

Certifications

Highly Preferred

• OSCP (Offensive Security Certified Professional)

• CISSP (Certified Information Systems Security Professional)

• Equivalent industry-recognized security certifications

Advanced Security Testing Certifications

• OSWP

• GIAC GWAPT

• INE eWPTX

Technology & Security Domains

Required

• Application Security

• Application Penetration Testing

• Threat Modeling

• Secure SDLC

• SAST

• DAST

• Software Composition Analysis (SCA)

• CI/CD Security

• API Security

• Web Application Firewalls (WAF)

Preferred

• Kubernetes Security

• Container Security Platforms

• Secrets Management Solutions

• Cloud Security Tooling

• Infrastructure as Code Security

• Vulnerability Management Platforms

Work Setup & Budget

Location: Makati City
Work Arrangement: Hybrid
Schedule: Regular Dayshift
Employment Type: Full-time

Why Join?

• Join a globally recognized financial services organization undergoing significant digital transformation.

• Drive application security and DevSecOps initiatives across multiple regional markets.

• Influence secure software development practices at enterprise scale.

• Work with modern cloud, container, and application security technologies.

• Collaborate with global engineering, architecture, and cybersecurity teams.

• Contribute to high-impact security programs supporting mission-critical business platforms.

• Enjoy long-term career growth within an innovative and security-focused environment.

Perks & Benefits

• Competitive Salary Package

• Hybrid Work Setup

• HMO Coverage

• Life and Accident Insurance

• Learning & Development Programs

• Professional Certification Support

• Global Career Opportunities

• Wellness and Employee Support Programs

• Performance and Recognition Programs

• Exposure to Regional and Global Security Initiatives