{"id":2123028,"url":"https://alion.io/job/interactsoftware-application-security-engineer","title":"Application Security Engineer","company":{"id":678927,"name":"Interactsoftware","domain":"interactsoftware.com","url":"https://alion.io/company/interactsoftware","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Manila, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16000,"max_usd":47000,"period":"year","method":null,"sample_n":4370},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Fortify","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Octopus Deploy","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"React.js","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-09-29T00:00:00Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-11T02:17:11Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"About Interact\nInteract is a leading provider of enterprise intranet software, connecting more than four million employees worldwide with some of the world's most recognised brands, including Levi's, Domino's, Teva Pharmaceuticals, and Technicolor.\nWe're a team of customer-focused problem solvers who are passionate about helping organisations communicate, connect, and engage more effectively. Continuous improvement is at the heart of everything we do, driving us to enhance our products, services, and customer experience every day.\nAs the workplace continues to evolve, Interact is embedding AI into every corner of the intranet experience, creating a powerful, intelligent, one-stop platform that helps employees find information faster, work more efficiently, and stay connected.\nWith offices in Manchester, New York, Dubai, Tulsa, Warsaw, and Manila, we support organisations across North America, EMEA, APAC, and Australia, delivering innovative solutions on a global scale.\nAt Interact, people come first. We're proud of the culture we've built: one that values collaboration, trust, and continuous learning. No matter where you are in your career, you'll be encouraged to share ideas, grow your skills, and make a meaningful impact alongside a team that genuinely cares about each other and our customers.\nIf you're passionate about secure software development and enjoy getting hands-on with code, this could be the role for you.As an Application Security Engineer, you'll work side-by-side with engineers to find and fix vulnerabilities before they become problems, build reusable security tooling, and influence the design of secure, resilient applications.\nYou'll treat security as an engineering challenge, helping shape the standards, patterns, and practices that make secure development the easiest path for every team.\nResponsibilities\nRead and write real code. Review pull requests for security-relevant changes and contribute fixes directly rather than filing tickets and walking away. \nManually assess applications and APIs - find, exploit, and prove real vulnerabilities, and distinguish genuine risks. \nBuild secure building blocks: reviewing libraries, safe wrappers, auth patterns, and paved-road templates so the easy way is the secure way. \nPerform threat modelling and design reviews on new features, working from how the system actually behaves, not a checklist. \nAutomate security into CI/CD (Octopus deploy/Azure DevOps) \nFix vulnerabilities; When you find a bug, ask what pattern allowed it and eliminate the pattern. \nSupport incident investigation and remediation for application security issues and get hands-on with logs, code, and root cause. \nLevel up engineers through code, examples, and quarterly training \nHelp shape standards and priorities for the wider engineering teams (this is a small team; you'll have real influence, but the day job is engineering). \nStay updated with the latest security threats, vulnerabilities, and industry trends to proactively address potential risks \nAdvocate for security best practices and influence engineering culture to prioritize security \nEvaluate and adopt new security tools and technologies to enhance the security posture \nParticipate incident response efforts for application security incidents, including investigation and remediation \nCollaborate with compliance teams to ensure applications meet regulatory and industry-specific security requirements (e.g., GDPR, ISO 27001) \nImplement and oversee security tools and technologies such as SAST, and DAST solutions \nFacilitate security architecture reviews and threat modelling sessions for new and existing applications \nReport on security metrics and KPIs to senior management, providing insights into the security posture and areas for improvement \nDrive continuous improvement, fostering a culture of security awareness and proactive risk management \nCoordinate with third-party vendors and security consultants as needed for specialised assessments or audits \nExperience\nStrong software engineering background - you've written and shipped production code, ideally in .NET and/or TypeScript/React, and you can drop into an unfamiliar codebase and reason about it. \nSolid application security experience securing web apps and APIs. \nDemonstrated ability to find vulnerabilities manually and explain both the exploit and the fix. \nComfortable integrating and, crucially, tuning security testing in CI/CD so the output is trustworthy. \nYou've influenced engineers as a peer, through code and pragmatism. \nExpert knowledge of application security principles, practices, and frameworks such as OWASP Top Ten, SANS/CWE Top 25 \nProficiency with security testing tools like Burp Suite, OWASP ZAP, Fortify, Checkmarx, SonarQube or similar \nStrong understanding of secure coding practices in languages and frameworks such as JavaScript, TypeScript, ReactJS, .NET, and others \nFamiliarity with DevSecOps practices and integrating security tools into CI/CD pipelines \nKnowledge of authentication and authorization protocols such as OAuth, SAML, JWT, and multi-factor authentication \nUnderstanding of cloud security principles and experience with cloud platforms like AWS and/or Azure \nExperience with compliance standards and regulations like GDPR, ISO 27001, PCI DSS, and SOC 2 \nKnowledge of encryption standards, key management, and data protection strategies \nExperience with incident response processes and security event management \nExcellent communication skills, adept at conveying security concepts to both technical and non-technical stakeholders \nHigh attention to detail with a commitment to maintaining the highest standards of security and quality \nProactive and strategic thinker, able to anticipate security challenges and stay ahead of emerging threats \nCollaborative mindset, thriving in a cross-functional team environment and building strong relationships across departments \nPassionate about security, with a continuous desire to learn and stay updated on the latest industry trends and threats \nResilient and adaptable, capable of handling high-pressure situations and making sound decisions during security incidents \nEthical and trustworthy, maintaining the highest level of integrity in handling sensitive information\nCertifications (Preferred):\nOffensive/practical certs like OSCP, or an equivalent \nCloud security depth in AWS and/or Azure; container/orchestration security. \nFamiliarity with GDPR, ISO 27001, SOC 2 as constraints to engineer around. \nWE ARE WORKING IN PARTNERSHIP WITH TECHANYWHERE AS AN EOR","description_format":"text","description_chars":6565,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cybersecurity","Information Technology","HR & Payroll Software"],"lifecycle":[{"event":"open","at":"2026-10-09T00:21:14Z"}],"visa":[],"liveness":{"score":69,"band":"ok","label":"Likely open","p_open":1,"p_active":0.767,"p_room":0.9,"age_days":11,"expected_fill_days":25,"reasons":["conf:1","win:mid"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/interactsoftware-application-security-engineer","json_url":"https://alion.io/job/interactsoftware-application-security-engineer.json","meta":{"generated_at":"2026-10-11T04:14:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":2684,"day_limit":5000,"remaining_today":2316,"minute_limit":60,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678927},"rest":"https://alion.io/mcp/rest/get_company?id=678927"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finteractsoftware-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finteractsoftware-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finteractsoftware-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/interactsoftware-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finteractsoftware-application-security-engineer"}]}