Application Engineer

• Read and write real code. Review pull requests for security-relevant changes and contribute fixes directly rather than filing tickets and walking away.
• Manually assess applications and APIs — find, exploit, and prove real vulnerabilities, and distinguish genuine risks.
• Build secure building blocks: reviewing libraries, safe wrappers, auth patterns, and paved-road templates so the easy way is the secure way.
• Perform threat modelling and design reviews on new features, working from how the system actually behaves, not a checklist.
• Automate security into CI/CD (Octopus deploy/Azure DevOps).
• Fix vulnerabilities; When you find a bug, ask what pattern allowed it and eliminate the pattern.
• Support incident investigation and remediation for application security issues and get hands-on with logs, code, and root cause.
• Level up engineers through code, examples, and quarterly training.
• Help shape standards and priorities for the wider engineering teams (this is a small team; you'll have real influence, but the day job is engineering).
• Stay updated with the latest security threats, vulnerabilities, and industry trends to proactively address potential risks.
• Advocate for security best practices and influence engineering culture to prioritize security.
• Evaluate and adopt new security tools and technologies to enhance the security posture.
• Participate incident response efforts for application security incidents, including investigation and remediation.
• Collaborate with compliance teams to ensure applications meet regulatory and industry-specific security requirements (e.g., GDPR, ISO 27001).
• Implement and oversee security tools and technologies such as SAST, and DAST solutions.
• Facilitate security architecture reviews and threat modelling sessions for new and existing applications.
• Report on security metrics and KPIs to senior management, providing insights into the security posture and areas for improvement.
• Drive continuous improvement, fostering a culture of security awareness and proactive risk management.
• Coordinate with third-party vendors and security consultants as needed for specialised assessments or audits.

Application Security Engineer

• Handles Incident & Issue Tickets that require deeper technical analysis
• Investigate application errors, system failures, and performance issues
• Participate in performing root cause analysis (RCA) for recurring incidents
• Provide timely fixes or workarounds to restore service
• Analyze logs, and database queries
• Reproduce issues in test or staging environments
• Work with technologies like SQL, scripts, or monitoring tools
• Support deployment activities (patches, hotfixes, minor releases)
• Validate application functionality after releases
• Coordinate with DevOps during rollouts
• Identify performance bottlenecks and recommend improvements
• Ensure SLAs (Service Level Agreements) are met
• Act as a bridge between L1 support (client) and L3 teams
• Escalate complex bugs with detailed analysis and logs
• Communicate with stakeholders about issue status and resolution timelines
• Maintain runbooks, SOPs, and troubleshooting guides
• Document known issues and solutions

Application Engineer jobs in Philippines

See all jobs on JobTailor

Application Security Engineer

Application Support Engineer, L2