Application Security Engineer (PH/SH)

Join the leading Crypto Brand in the Philippines!Who we areWe are one of the earliest and largest crypto platforms in Southeast Asia offering exchange and wallet services to our users. Our product lineup also includes electronic payment service and e-wallet. Through our wallet, users can send money to anyone, pay for bills, shop online at over 100,000 merchants, receive money transfers from 200+ countries even without a bank account, and of course view and purchase cryptocurrencies.

What you'll do

• Assist development and product teams with the threat modeling, security review activities  (VAPT/SAST/DAST activities etc) & triage security findings.
• Develop attack techniques, tool/ exploit development, intelligence analysis and adversarial tactics
• Support remediation effort and track open issues and follow up to ensure remediation 
• Provide security consultancy, technical guidance, expertise and solutions.
• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks.
• Help application team in developing and implementing security test and verification scripts for testing and validating security controls/issues.
• Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.
• Identify and assess cyber risks in the application and infrastructure..
• Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.
• Ensure security' compliance policies/procedures are met through ongoing security reviews, audits, and exercises.
• Participation in incident response activities

what we expect from you

• 5+ years of experience in the Information security field in the Fintech and/or IT industry;
• CISSP/CCSP/CCSK/OSCP/CSSLP certification or its equivalent is preferred
• In-depth knowledge of security concepts regarding web, iOS, Android and Rest API security. Understanding of current and emerging security technologies and threats.
• In depth understanding of threat-attack methodologies (STRIDE, DREAD, OWASP, Attack trees, MITRE ATT&CK, etc.) and corresponding mitigations in an enterprise environment.
• Experienced in JAVA and Scala programming languages
• Proficient with methodologies, tools, best practices and processes across various cybersecurity areas.
• Proven experience with threat modeling and risk analysis.
• Ability to gather written and verbal information from multiple sources, and assess and consolidate risks to provide appropriate recommendations.
• Hands-on experience with penetration testing and vulnerability analysis frameworks and tools.
• Scripting skills in Python, shell, and PowerShell are sufficient to automate security controls;
• Working experience with the cloud security aspects (AWS is preferable);
• Knowledge of common cyber threats and vulnerabilities, protection mechanisms;
• Be up-to-date with the latest security development, techniques, and tools;
• Excellent verbal and written communication in the English language.

Listed in: Cryptocurrency Jobs, Security Web3 Jobs, Developer Crypto Jobs, Exchange Crypto Jobs, Compliance Crypto Jobs, Python Web3 Jobs, Full Time Web3 Jobs.