Application Security Analyst | DevSecOps & Vulnerabilities

PERSOL Outsourcing; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PERSOL Outsourcing in Singapore is seeking an experienced Application Security professional to conduct security reviews across applications and APIs, analyze findings from SAST/DAST/SCA tools, and assess exploitability and business impact. The role collaborates with DevOps to remediate vulnerabilities and support secure SDLC practices.

You will maintain risk documentation and support security risk assessments for new projects, ensuring secure CI/CD implementations and effective remediation

Qualifications

• Degree or diploma in Cybersecurity, IT, Computer Science or a related discipline
• 3-5 years of relevant experience in Application Security, Cybersecurity, Vulnerability Management or DevSecOps
• Hands-on experience with SAST, SCA, DAST tools and vulnerability assessment
• Good knowledge of OWASP Top 10, web application security, API security and common vulnerabilities
• Ability to assess exploitability, business impact, reachable code paths and remediation requirements
• Understanding of Secure SDLC, DevSecOps and CI/CD security controls

Responsibilities

• Conduct application security reviews across applications, APIs and development projects
• Analyze findings from SAST, SCA and DAST tools to determine vulnerability applicability, exploitability and business impact
• Assess vulnerabilities including reachable code paths, false positives and non-applicable findings
• Review security waiver and risk acceptance requests with justifications and compensating controls
• Collaborate with development and DevOps teams to remediate and track vulnerabilities to closure
• Support integration of application security controls into DevSecOps practices and CI/CD pipelines
• Conduct or support security risk assessments for new applications, system changes and APIs
• Maintain security assessment reports, vulnerability records and risk documentation

Skills

Application Security

Vulnerability Management

DevSecOps

CI/CD Security

Analytical Skills

Documentation

Communication

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

SAST Tools

SCA Tools

DAST Tools

Job description

PERSOL Outsourcing in Singapore is seeking an experienced Application Security professional to conduct security reviews across applications and APIs, analyze findings from SAST/DAST/SCA tools, and assess exploitability and business impact. The role collaborates with DevOps to remediate vulnerabilities and support secure SDLC practices.

You will maintain risk documentation and support security risk assessments for new projects, ensuring secure CI/CD implementations and effective remediation