Application Security Engineer (Threat Modeling)
Manulife — Quezon City
Posted 2026-09-24
We are looking for an experienced Application Security Engineer specializing in Threat Modeling to join our Global Cybersecurity Services (GCS) Team. In this individual-contributor role, you will serve as a trusted security partner to engineering, architecture, product, and risk teams. You will identify design risks early, translate them into practical security requirements, and help ensure agreed mitigations are implemented throughout the software development lifecycle. The role requires sound technical judgment, strong facilitation skills, and the ability to explain complex security risks clearly to both technical and business stakeholders. Key Responsibilities: Independently lead threat modeling engagements for applications, APIs, cloud services, third-party integrations, and significant technology changes from early design through implementation. Work with engineering and architecture teams to define scope and document system components, assets, data flows, entry points, trust boundaries, dependencies, and key assumptions. Apply an appropriate threat modeling approach, such as STRIDE, attack trees, abuse cases, PASTA, or LINDDUN, based on the system, risk, and business context.