Manulife
Application Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Manulife
Manulife Financial Corporation is a prominent international financial services provider based in Toronto, Canada. With over 36 million customers worldwide, the company employs more than 37,000 people and has a network of over 109,000 agents. Founded in 1887, Manulife has a rich history of expansion, beginning with its first policy sold outside Canada in Bermuda and later entering the U.S. market in 1903. Manulife offers a wide range of financial services and insurance products, including life insurance, personal health insurance, group benefits, income protection, travel insurance, annuities, banking services, estate planning, and investment solutions. The company operates under the Manulife brand in Canada, Asia, and Europe, and as John Hancock in the United States. With a mission to simplify financial and insurance services, Manulife aims to enhance customer experiences and meet their needs effectively.
Security at Manulife
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Manulife's Application Security (AppSec) team is responsible for identifying, classifying, monitoring, remediating, and mitigating security vulnerabilities. A key initiative is building a penetration testing Centre of Excellence (COE) and performing penetration tests. Information regarding their developer enablement vs. gatekeeping posture, explicit Security Champions program details, and public SLA/MTTR metrics for vulnerability management is not publicly available.”
Security Team
The Manulife Application Security team reports directly to the Manulife ETS Cyber Assessment Application Security Team. Bobby Singh is the Global Chief Information Security Officer (CISO) at Manulife (John Hancock). Manulife is actively hiring for AppSec roles, including Application Security Engineer (Threat Modeling) and Penetration Tester, as of January 8, 2026. Common responsibilities in these postings include threat modeling, security reviews, security architecture evaluation, SAST/DAST/SCA familiarity, and penetration testing for various platforms. A detailed AppSec organizational chart or a clearer reporting chain beyond the ETS Cyber Assessment Application Security Team is not publicly available.
Key Initiatives
Manulife's AppSec initiatives include building a penetration testing Centre of Excellence (COE) and performing penetration tests against internal and external environments. Their workflows involve threat modeling, security reviews, security architecture evaluation, and familiarity with SAST, DAST, and SCA. Information regarding a Security Champions program, specific "Shift Left"practices, or public SLA/MTTR metrics for vulnerability management is not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.