2 месяца назад
Application Security Engineer (Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Application Security Engineer (Fintech): Securing financial applications through SAST, DAST, manual code reviews, vulnerability management, and CI/CD automation with an accent on secure development practices and cloud-native application security. Focus on integrating security tooling into developer workflows, analyzing application vulnerabilities during incidents, and addressing emerging threats across containerized environments.
Location: NCR - WGC, Philippines
Company
develops innovative fintech and financial solutions through GCash for the Philippine market.
What you will do
- Conduct SAST, DAST, dependency scanning, and manual code reviews for high-risk applications and critical features.
- Configure and manage application security tools and automate security testing in CI/CD pipelines.
- Collaborate with development and DevOps teams to embed security into engineering workflows.
- Provide secure coding training, guidance, and remediation recommendations to developers.
- Track, prioritize, and support remediation of application and dependency vulnerabilities.
- Analyze application-level vulnerabilities during security incidents and support incident response.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
- 5+ years of experience in application security or software development with a strong security focus.
- Proficiency in Python, Java, or JavaScript.
- Deep understanding of OWASP Top 10, secure design principles, and common attack vectors.
- Experience integrating security tools into CI/CD pipelines and knowledge of cloud-native application security and containerized environments.
- Strong analytical, problem-solving, and communication skills.
Culture & Benefits
- Career growth and development opportunities.
- Collaborative environment focused on creating innovative financial solutions.
- Flexible compensation and benefits package.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →