Application Security Engineer - Penetration Testing Quality Assurance
Manulife — Quezon City
Posted 2026-09-24
We are looking for an experienced Application Security Engineer to serve as the quality-assurance point for penetration testing deliverables across applications and APIs. In this individual-contributor role, you will independently review reports and findings before release, confirm that risk ratings and supporting evidence are sound, and help application teams move findings through remediation and closure. You will work closely with penetration testers, vulnerability management leads, and technology stakeholders to maintain consistent reporting standards, improve testing quality, and provide clear, risk-based guidance. Key Responsibilities: Perform final quality reviews of penetration test reports before release, ensuring findings are technically accurate, reproducible, supported by sufficient evidence, within the approved scope, and written for both technical and business audiences. Validate affected assets, exploitation paths, business impact, duplicate findings, and false positives; challenge conclusions when the evidence does not support the stated risk. Review and calibrate severity ratings using CVSS, exploitability, asset criticality, business impact, environmental context,