Application Security Engineer (Threat Modeling)

We are looking for an experienced Application Security Engineer specializing in Threat Modeling to join our Global Cybersecurity Services (GCS) Team. In this individual-contributor role, you will serve as a trusted security partner to engineering, architecture, product, and risk teams. You will identify design risks early, translate them into practical security requirements, and help ensure agreed mitigations are implemented throughout the software development lifecycle. The role requires sound technical judgment, strong facilitation skills, and the ability to explain complex security risks clearly to both technical and business stakeholders.

Key Responsibilities:

• Independently lead threat modeling engagements for applications, APIs, cloud services, third-party integrations, and significant technology changes from early design through implementation.

• Work with engineering and architecture teams to define scope and document system components, assets, data flows, entry points, trust boundaries, dependencies, and key assumptions.

• Apply an appropriate threat modeling approach, such as STRIDE, attack trees, abuse cases, PASTA, or LINDDUN, based on the system, risk, and business context.

• Assess threats using likelihood, impact, exploitability, asset criticality, existing controls, and business context; document clear, defensible risk decisions.

• Translate identified threats into practical security requirements, design recommendations, test criteria, and remediation actions, and track them through closure or formal risk acceptance.

• Provide governance and quality oversight at key stages of the threat modeling process, confirming that scope, assets, threats, mitigations, and supporting evidence are complete and aligned with security standards.

• Embed threat modeling into architecture reviews, agile delivery, change management, security testing, penetration testing, and other Secure SDLC activities.

• Maintain and improve standards, templates, threat libraries, secure design patterns, and reusable mitigation guidance; identify opportunities for automation and self-service adoption.

• Coach delivery teams, review the quality and coverage of threat models, identify recurring design risks, and communicate outcomes, exceptions, and trends to technical and business stakeholders.

• Produce accurate service metrics and reporting that demonstrate delivery performance, adoption, quality, mitigation follow-through, and measurable risk reduction.

Required Qualifications:

• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.

• At least five years of relevant experience across threat modeling, application security, security architecture, secure software development, cloud security, or a related discipline.

• Demonstrated experience leading collaborative threat modeling or secure design reviews for applications, APIs, cloud-native systems, distributed architectures, or third-party integrations.

• Ability to analyze architectures and data flows, identify trust boundaries and attack paths, prioritize material threats, and translate findings into testable requirements and practical mitigations.

• Practical knowledge of at least one established threat modeling method, such as STRIDE, attack trees, abuse cases, PASTA, or LINDDUN, with the ability to select and adapt methods for different engagements.

• Working knowledge of application and API security, identity and access management, data protection, cloud and network architecture, containers, distributed systems, and common attack techniques.

• Familiarity with relevant standards and frameworks, including OWASP guidance, MITRE ATT&CK, and the NIST Secure Software Development Framework.

• Experience incorporating threat modeling into architecture governance, Secure SDLC activities, security testing, penetration testing, remediation, and risk acceptance processes.

• Strong analytical, facilitation, technical-writing, and stakeholder-management skills, with the ability to work independently and communicate risk clearly to technical and business audiences.

• Amenable to work at UP Ayala Technohub, Quezon City, under a hybrid arrangement with three onsite days per week.

• Amenable to work a fixed late mid-shift or night-shift schedule based on business requirements.

Preferred Qualifications:

• Experience supporting an enterprise threat modeling, application security, product security, or security architecture program, preferably in financial services, insurance, or another regulated industry.

• Experience assessing modern architectures, including Microsoft Azure, AWS, Google Cloud, Kubernetes, microservices, event-driven systems, APIs, mobile applications, or AI-enabled solutions.

• Experience creating reusable threat libraries, reference threat models, secure design patterns, architecture decision records, or mitigation guidance.

• Experience with threat modeling or diagramming tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, IriusRisk, pytm, Visio, or comparable solutions.

• Knowledge of privacy threat modeling, software supply-chain risks, AI and agentic-system risks, cloud shared-responsibility models, or emerging attack techniques.

• Experience improving adoption through developer enablement, self-service approaches, automation, quality criteria, metrics, or maturity assessments.

• A relevant security or architecture certification, such as ISC2 CSSLP or CISSP, Microsoft Azure Security Engineer Associate, GIAC Defensible Security Architecture, SABSA, TOGAF, or an equivalent credential.

What Success Looks Like:

• Threat modeling engagements are completed on time, with clear scope, strong technical coverage, and decisions that stakeholders can act on.

• Material design risks are identified early and translated into practical requirements that are tracked to closure or documented risk acceptance.

• Threat models remain current as architectures change, and mitigation evidence is complete, traceable, and aligned with governance expectations.

• Delivery teams increasingly apply repeatable threat modeling practices through effective coaching, reusable guidance, and self-service resources.

• Recurring design risks and service trends are converted into measurable improvements to standards, tooling, automation, and the Secure SDLC.

When you join our team:

• We’ll empower you to learn and grow the career you want.

• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.

• As part of our global team, we’ll support you in shaping the future you want to see.