{"id":168339,"url":"https://alion.io/job/manulife-security-engineer","title":"Security Engineer","company":{"id":6650,"name":"Manulife","domain":"manulife.com","url":"https://alion.io/company/manulife","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":99,"open_postings":117,"ghost_share":0,"stale_share":0.222,"repost_share":0.06,"time_to_fill_p50_days":18,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Makati, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"Metasploit","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"ISO 27001","optional":true},{"name":"PCI DSS","optional":true},{"name":"Red Teaming","optional":true},{"name":"SOC 2","optional":true},{"name":"STRIDE","optional":true}],"status":"live","first_seen_at":"2026-05-25T00:00:00Z","employer_posted_date":"2026-05-25","last_verified_at":"2026-10-16T13:15:09Z","board_verified":true,"closed_at":null,"days_open":144,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":144},"description":"The Security Engineer plays a key role in strengthening Manulife's application security posture across its digital products, platforms, and financial services systems. Operating with greater autonomy, this role leads security assessments, drives remediation efforts, and actively contributes to the development of AppSec programs and standards. The ideal candidate brings solid hands-on experience in secure software development, offensive security techniques, AI-driven security automation, and cross-functional leadership - all grounded in Manulife's core values.\nPosition Responsibilities:\nLead end-to-end application security assessments including SAST, DAST, manual code reviews and penetration testing.\n\nIndependently conduct ad hoc and scheduled penetration testing on web applications, APIs, AI/ML, and mobile applications - documenting and presenting findings to stakeholders.\n\nPerform in-depth analysis of OWASP Top 10 and advanced vulnerability classes including business logic flaws, broken access control, and insecure deserialization.\n\nDesign, code, and deploy AI-powered automation tools and security scripts that enhance vulnerability detection, threat triage, and testing efficiency at scale.\n\nWrite clean, maintainable code to build internal security tooling, integrations, and AI-assisted workflows that reduce manual effort across the Security Engineering Team.\n\nConduct threat modeling for complex, high-risk systems and new product initiatives, recommending security architecture improvements.\n\nServe as a security advisor and informal leader to development and product teams - driving security-by-design principles and secure coding best practices.\n\nMentor and coach associate security engineers - conducting knowledge-sharing sessions, reviewing their work, and supporting their professional development.\n\nProduce clear, risk-rated vulnerability reports with actionable remediation guidance for both technical and non-technical audiences.\n\nContribute to the development and maintenance of application security policies, standards, playbooks, and training materials.\n\nStay ahead of evolving threats and vulnerabilities in the financial services and fintech space, translating intelligence into actionable controls.\n\nRequired Qualifications:\n3-6 years of hands-on experience in application security, with demonstrated ownership of security assessments and remediation cycles.\n\nDeep familiarity with OWASP Top 10, OWASP Testing Guide (OWTG), and OWASP Application Security Verification Standard (ASVS).\n\nProven experience conducting Web application, API, AI/ML, Mobile and Desktop penetration testing using tools such as Burp Suite Pro, OWASP ZAP, or Metasploit.\n\nDemonstrated ability to code and build AI-powered security automation tools - including scripts or integrations using Python, JavaScript, or similar languages.\n\nExperience working with AI/ML APIs or LLM-based tools to automate security workflows such as vulnerability analysis, report generation, or threat detection.\n\nDemonstrated leadership skills - including the ability to guide peers, facilitate technical discussions, and influence security outcomes across teams.\n\nExcellent communication skills - able to articulate risk clearly to both technical teams and business stakeholders.\n\nHas background in threat modeling and mobile penetration testing.\n\nPreferred Qualifications:\nIndustry certifications such as OSCP, GWAPT, eWPT, CSSLP, CISSP, or equivalent.\n\nExperience in banking, insurance, or financial services with working knowledge of PCI-DSS, BSP regulations, ISO 27001, or SOC 2.\n\nCloud security experience on AWS, Azure, or GCP - including knowledge of cloud-native appsec controls.\n\nExperience with mobile application security testing on iOS and Android platforms.\n\nProficiency in threat modeling using STRIDE, PASTA, or similar methodologies for complex, multi-tier systems.\n\nExposure to red team exercises or bug bounty programs.\n\nTrack record of leading or co-leading security initiatives, process improvements, or cross-team programs.\n\nWhen you join our team:\nWe’ll empower you to learn and grow the career you want.\n\nWe’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.\n\nAs part of our global team, we’ll support you in shaping the future you want to see.\n\nAbout Manulife and John Hancock\nManulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.\nManulife is an Equal Opportunity Employer\nAt Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.\nIt is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact .\nWorking Arrangement\nHybrid","description_format":"text","description_chars":5905,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Asset Management & Funds","Health Insurance & Benefits","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-05-25T00:00:00Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.226,"p_room":0.28,"age_days":144,"expected_fill_days":18,"reasons":["conf:3","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/manulife-security-engineer","json_url":"https://alion.io/job/manulife-security-engineer.json","meta":{"generated_at":"2026-10-16T23:24:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5328,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6650},"rest":"https://alion.io/mcp/rest/get_company?id=6650"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmanulife-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmanulife-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmanulife-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/manulife-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmanulife-security-engineer"}]}