Application Security Team Lead

Application Security Team Lead

Location: Mandaluyong/Pasig area (as per original), Salary: ₱ - ₱ , Employer: Meralco Industrial Engineering Services Corporation

Job Title: Application Security Lead

• Develops and implements cybersecurity strategies, policies, procedures, and incident response plans, ensuring alignment with organizational objectives and compliance with relevant standards and regulations.
• Supports the Head of Infrastructure and Security Management by overseeing the organization's overall cybersecurity posture and risk management initiatives.
• Conducts regular risk assessments, vulnerability scans, penetration testing, and incident monitoring, implementing appropriate controls and coordinating with internal teams to mitigate threats and manage recovery efforts.
• Manage security tools and systems, including firewalls, intrusion detection systems, SIEM, and VAPT tools, router and switch configurations.
• Maintains logs, documents incident responses, and ensures cybersecurity incidents are properly recorded and reviewed.
• Collaborates with cross-functional teams (Systems, Networks, Application Development, Solutions Development) to embed security into systems and operations, approve system access changes, and communicate security risks and recommendations to stakeholders.
• Leads security awareness and education initiatives, delivering training programs on best practices, phishing prevention, evolving threats, and user responsibilities to employees and management.
• Reviews IT processes, business services, and infrastructure to ensure alignment with established security, compliance, and governance standards.
• Supports the Data Protection Officer (DPO) in the implementation of enterprise risk management initiatives and data protection measures.
• Develops and maintains risk management frameworks, including policies and procedures for business continuity, disaster recovery, and infrastructure security.

• Must be a graduate of Information Technology or any relevant course.
• Must have at least 2-3 years experience.

Software Security Engineer

Location: Philippines

Company Description: Avaloq is a Swiss-based provider of wealth management technology and services. We are seeking talented people to join our mission to orchestrate the financial ecosystem.

• Analysis, design and development of requirements in collaboration with Product Development, customers, business analysts and software partners
• Collaboration and contribution in projects across departments
• Check the daily automated build process for security warnings and provide support to resolve it
• Monitor third party library enrolment, update, and removal by using in-house tools and Whitesource
• Provide expert analysis on false positives findings, validate exploitability of detected vulnerabilities, and develop possible fixes
• Maintain data for configuration control of the release baseline
• Coordinate security actions across multiple teams to ensure the high quality of Avaloq products
• Prepare and distribute reports and documentation of security risks
• Conduct periodic reviews to ensure compliance with established security policies and procedures
• Participate in technical talks to internal members regarding security implementation, vulnerabilities, and opportunities for improvement

• University degree graduate preferably in IT, Mathematics or Physics
• Exposure to Financial Markets and understanding of financial products
• Deep Knowledge on security concepts, industry standards and good practices
• Experience in Java, JavaScript. Objective C, PL/SQL
• Ability to convey technical information to non-technical individuals
• With enthusiasm for complex multi-platform security solutions in the intranet and internet environment
• Strong analytical skills and high standards of quality
• Ability to promote a positive attitude among the organization through personal behaviour

Additional Information: We promote hybrid work and inclusive culture; unsolicited CVs from agencies will not be paid. LI-Hybrid