# Security Engineer

**Company:** [Azeus Convene](https://jobs.workable.com/companies/gpQhZzqQtNRZ9GJbrwAohV.md)
**Location:** Cebu City, Philippines
**Workplace:** on site
**Employment type:** Full-time

[Apply for this job](https://jobs.workable.com/view/fb007777-f1e2-4862-9569-e233e4d1b387)

## Description

**About the Security Engineer role:**

**Responsibilities**

Involved in Red Team activities:

-   Perform penetration testing of Web and Mobile (iOS, Android, Windows, and Mac) applications
-   Own the vulnerability management lifecycle from identification, remediation to reporting
-   Active monitoring and detection of operational security risks in the organization
-   Conduct technical investigations on security incidents and tools
-   Liaise directly with users on security enquiries and concerns during Pre-sales and Support

Conduct engagement with the Blue Team for the following:

-   Work with engineering and DevOps teams to implement security best practices
-   Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle
-   Review risks and patches of software components used in the applications
-   Facilitate threat modelling as part of the software development lifecycle
-   Help in security awareness training
-   Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2

## Requirements

**Qualifications**

-   At least 5 years of experience in application security testing and assessments
-   Solid understanding of cybersecurity principles, standards, and protocols such as OWASP Top 10 and SANS Critical Security Controls
-   Experience with application security tools such as Burpsuite, OWASP ZAP, Metasploit, SonarQube (experience with Ghidra or IDA is a plus)
-   Experience with programming languages such as Java, JavaScript, C/C++
-   Experience with scripting languages such as Bash or PowerShell
-   Experience and knowledge of cloud solutions and architectures such as AWS
-   Experience and knowledge of Security Information and Event Management (SIEM) technologies
-   Good analytical skills
-   Strong sense of ownership
-   Technical and industry certifications such as CISA, CISM, CISSP are a plus

**Others:**

-   Successful completion of background check and NBI clearance will be required.