1 month ago
Quezon City, PhilippinesSenior
Responsibilities
- Assess applications for hard-coded secrets, credentials, certificates, API keys, and configuration risks.
- Design and implement secure migration and remediation approaches using Azure Key Vault, HashiCorp Vault, or equivalent platforms.
- Develop and maintain secure backend services, APIs, reusable components, libraries, automation utilities, and security-focused tools.
- Build scalable automation and integrate security controls into CI/CD pipelines to reduce manual remediation effort.
- Analyze, prioritize, and remediate findings from SAST, DAST, SCA, secrets scanning, penetration testing, code reviews, and vulnerability assessments.
- Participate in architecture and solution reviews, recommend secure patterns, and address root causes of recurring risks.
- Support discovery, requirements gathering, technical reviews, and communication of security risks, trade-offs, and remediation plans.
- Collaborate with developers, architects, executives, business stakeholders, and global teams.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering, Information Technology, Cybersecurity, or a related technical discipline.
- At least five years of software engineering experience, including secure application development and vulnerability remediation.
- Experience developing backend applications, APIs, reusable components, automation utilities, and security-focused tools or frameworks.
- Hands-on experience with Secure SDLC principles, secure coding, and application security practices across the development lifecycle.
- Experience remediating findings from SAST, DAST, SCA, secrets scanning, penetration testing, code reviews, and vulnerability assessments.
- Knowledge of secrets management, credential lifecycle management, API keys, tokens, certificates, database credentials, remediation, and rotation practices.
- Strong understanding of application security, OWASP Top 10, vulnerability management, API security, backend architecture, object-oriented programming, design patterns, and reusable component design.
- Hands-on experience with GitHub, GitHub Actions, GitGuardian, Snyk, security testing, and vulnerability management platforms.
- Ability to explain technical designs, architecture decisions, security trade-offs, remediation approaches, and project contributions.
- Preferred experience with enterprise Application Security, Secrets Management, DevSecOps, Platform Security, Microsoft Azure, cloud-native security controls, workload identity, certificate management, and CI/CD security controls.
- Preferred certifications include ISC2 CSSLP, CompTIA Security+, GIAC GSEC, GIAC GWEB, GIAC GWAPT, HashiCorp Certified: Vault Associate, GitHub Advanced Security, GitHub Actions, or equivalent credentials.
- Preferred training or experience in secure coding, Secure SDLC, OWASP Top 10, threat modeling, application security architecture, vulnerability remediation, defensive web application security, security automation, or responsible generative AI use.
- Experience with process improvement, automation opportunities, workflow simplification, root-cause analysis, measurable outcomes, and scalable Application Security services is preferred.
Benefits
- Hybrid work arrangement at UP Ayala Technohub, Quezon City, with three days per week in the office.
- Fixed late mid-shift or night-shift schedule based on business requirements.
- Flexible environment supporting learning, career growth, well-being, and inclusion.
- Global team environment with support for professional development and career direction.
About Manulife
Manulife is a Toronto‑headquartered public financial services company that provides life and health insurance, retirement plans, and wealth and asset management to individuals and institutions. It earns premiums and fee income from insurance, investment, and advisory products delivered across Canada, Asia, and Europe, and operates as John Hancock in the United States. Founded in 1887, the company is listed on the Toronto Stock Exchange.