{"id":2910324,"url":"https://alion.io/job/pwc-application-security-manager","title":"Application Security Manager","company":{"id":5739,"name":"PwC","domain":"pwc.com","url":"https://alion.io/company/pwc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":2640,"ghost_share":0,"stale_share":0.514,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Makati, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15500,"max_usd":36000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"Fortify","optional":false},{"name":"GraphQL","optional":false},{"name":"Kali Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"MITRE D3FEND","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rest API","optional":false},{"name":"SOAP","optional":false},{"name":"SonarQube","optional":false},{"name":"SQLite","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2023-01-04T00:00:00Z","employer_posted_date":"2023-01-04","last_verified_at":"2026-10-24T19:04:51Z","board_verified":false,"closed_at":null,"days_open":1391,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":1391},"description":"Line of Service\nAdvisoryIndustry/Sector\nNot ApplicableSpecialism\nCybersecurity & PrivacyManagement Level\nManagerJob Description & Summary\nA career in our Security Architecture practice, within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. You’ll play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats.In joining, you’ll be a part of a team that helps organisations design and create sustainable security solutions to provide foundational capabilities and operational discipline through a focus on enterprise requirements and prioritisation, Information Technology security architecture, and the software development lifecycle.\nJob Responsibilities:\nManage, direct and deliver cyber-attack simulations as part of the RED team activity\nManage, direct and deliver Vulnerability Assessment (VA) and Penetration Testing (PT) and configuration review for network, web, mobile and thick-client applications, APIs, POS etc\nManage, direct and deliver source-code review using automated and manual approaches, review results to eliminate false positives\nManage, direct and deliver configuration reviews for OS , DB, Firewall, routers, switches and other security devices/components\nPerform and deliver gap analysis and assessments based on standards, guidelines, notices, circulars (eg., ISO27K1, MAS TRM, HKMA etc)\nPrepare and review detailed reports and ensure timely delivery of status updates and final reports to clients\nProvide technical guidance with respect to the development and execution of our key application security service offerings, including:\nconducting assessments of applications (web, cloud, mobile, API) using range of manual and automated source code review techniques;\nperforming security architecture reviews and risk assessments for applications in design and production phases;\nidentifying potential threats and attacks to applications systems through threat modeling;\nidentifying security recommendations and aligning them to appropriate risk ranking systems;\nintegrating application security tools and process in pipeline;\nagile penetration testing; evaluating, developing, enhancing and/or running application security programs for our clients;\nconducting the above with a specific focus on DevSecOps.\nManage client stakeholders, provide project status updates, discuss findings and explain recommendations\nWork with clients to analyze, evaluate, and enhance the effectiveness of their application/product security posture at procedural and technological levels from design to deployment.\nKeep abreast of the latest IT Security news, exploits, hacks\nEssential Skills:\nManage projects, team members and client stakeholders for successful delivery\nManage project economics\nThorough and practical knowledge of OWASP, network protocols, data on the wire, and covert channels\nHands on experience with popular security tools - Nmap, Nessus, Kali, Metasploit, BurpSuite, Netsparker, OWASP CSRF Tester, Fortify/Checkmarx, SonarQube, Synopsys, SQLite browser, Drozer\nWorking knowledge of manual testing of web applications\nUnderstands Software Development Life Cycle and SOAP, REST and GraphQL APIs\nSkills in performing VAPT for Web applications, Mobile applications, APIs, Network infrastructure, Thick client applications\nGood knowledge of modifying and compiling exploit code\nGood understanding and knowledge of codes languages\nHas practical experience in auditing various OS, DB, Network and Security technologies\nStrong understanding Unix/Linux/Mac/Windows, operating systems, including bash and Powershell\nExperience in at least three of the following:\nSet up and operate red team infrastructure\nPerform targeted, covert penetration tests with vulnerability identification, exploitation, and post-exploitation activities\nEmail, phone, or physical social-engineering assessments\nDeveloping, extending, or modifying exploits, shellcode or exploit tools\nReverse engineering malware, data obfuscators, or ciphers\nStrong credentials in wireless, web application, and network security testing\nFamiliar with MITRE ATT&CK framework and D3FEND matrix\nEducational Requirements & Experience\n\nBachelors in Computer Science/IT/Electronics Engineering or equivalent University degree.\nMinimum of 5-7 years of experience in the managing and delivering security tests and compliance review projects.\nCertifications: CREST CRT, CREST CPSA, Offensive Security Certified Professional (OSCP), GIAC Certified Web Application Defender (GWEB)\nOther Certifications: OSWP, BSCP, Certified Red Team Professional\nEducation (if blank, degree and/or field of study not specified)\nDegrees/Field of Study required: Bachelor of Science - Information TechnologyDegrees/Field of Study preferred:Certifications (if blank, certifications not specified)\nRequired Skills\nOptional Skills\nDesired Languages (If blank, desired languages not specified)\nTravel Requirements\nNot SpecifiedAvailable for Work Visa Sponsorship?\nNoGovernment Clearance Required?\nYesJob Posting End Date","description_format":"text","description_chars":5548,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Penetration Testing","Financial Advisory, Valuation & Restructuring","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-20T09:26:45Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.144,"p_room":0.28,"age_days":1391,"expected_fill_days":24,"reasons":["conf:34","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/pwc-application-security-manager","json_url":"https://alion.io/job/pwc-application-security-manager.json","meta":{"generated_at":"2026-10-26T19:16:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25973,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5739},"rest":"https://alion.io/mcp/rest/get_company?id=5739"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpwc-application-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpwc-application-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpwc-application-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pwc-application-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpwc-application-security-manager"}]}