Application Security Analyst — Secure SDLC & Vulnerabilities

FPT Asia Pacific; Singapore; Presencial; SGD 70.000 - 110.000; Jornada completa

Descripción de la vacante

FPT Asia Pacific is seeking a Cybersecurity Analyst specialising in Application Security to assess, identify, and manage security vulnerabilities across enterprise applications and development projects.

The role involves collaborating with development, DevOps, and security teams to evaluate risks, review findings from SAST/SCA/DAST, and support remediation throughout the SDLC. You’ll drive secure coding and CI/CD security practices within a DevSecOps framework.

Formación

• Degree or Diploma in Cybersecurity, IT, CS, or related discipline.
• 3–5 years of experience in Cybersecurity, Application Security, Vulnerability Management, or DevSecOps.
• Hands-on experience analysing application security vulnerabilities and remediation.
• Experience supporting security risk assessments and risk acceptance processes.

Responsabilidades

• Conduct application security reviews across applications and development projects.
• Review findings from SAST, SCA, and DAST tools.
• Assess vulnerabilities based on exploitability, business impact, and context.
• Identify false positives and risks; recommend remediation measures.
• Collaborate with development and DevOps to implement fixes.
• Track vulnerabilities and remediation activities through to closure.

Conocimientos

SAST

SCA

DAST

Vulnerability Mgmt

OWASP Top 10

Secure SDLC

DevSecOps

CI/CD Security

AWS

Educación

Degree or Diploma in Cybersecurity/IT/CS

Descripción del empleo

FPT Asia Pacific is seeking a Cybersecurity Analyst specialising in Application Security to assess, identify, and manage security vulnerabilities across enterprise applications and development projects.

The role involves collaborating with development, DevOps, and security teams to evaluate risks, review findings from SAST/SCA/DAST, and support remediation throughout the SDLC. You’ll drive secure coding and CI/CD security practices within a DevSecOps framework.