Application Security Analyst/Specialist

UC Tech Pte Ltd; Singapore; On-site; SGD 90,000 - 180,000; Full time

Job summary

UC Tech Pte Ltd in Singapore is seeking an Application Security Specialist to strengthen the security posture of its applications and supporting infrastructure. You will work with development, DevSecOps, and operations teams to identify, analyze, and remediate vulnerabilities while ensuring compliance with security standards.

You will review SAST/DAST results, audit container and OS security, support audits, and drive remediation with engineering teams.

Qualifications

• Strong understanding of application security principles and best practices.
• Hands-on experience with SAST and DAST tools.
• Experience reviewing vulnerability assessment reports.
• Knowledge of OWASP Top 10 and common web application security risks.
• Experience with SCA tools such as Black Duck or equivalents.
• Familiarity with SSDLC and DevSecOps practices.

Responsibilities

• Review and validate SAST/DAST results.
• Audit OS, containers, and DB vulnerability scans.
• Assess security hardening across app components.
• Collaborate with dev/DevSecOps to remediate findings.
• Maintain audit documentation and remediation tracking.
• Support security audits of apps and infra.
• Monitor threats and advise on mitigations.
• Conduct or support VAPT activities.
• Provide guidance on remediation best practices.

Skills

Application security

SAST

DAST

Vulnerability assessment

OWASP Top 10

SSDLC/DevSecOps

Documentation & reporting

Tools

Black Duck

Coverity

Kubernetes

Docker

Job description

*Only native Singaporeans will be considered*

Job Description

The Application Security Specialist is responsible for assessing, validating, and improving the security posture of applications and supporting infrastructure. The role involves working closely with development, DevSecOps, and infrastructure teams to identify, analyze, and remediate security vulnerabilities while ensuring compliance with security standards and best practices.

Key Responsibilities

Review and validate results from Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools.

Audit operating systems, containers, and database vulnerability scan reports to identify security risks and misconfigurations.

Assess the effectiveness of security hardening measures across application components, including web servers, APIs, containers, and databases.

Collaborate with application development and DevSecOps teams to drive remediation of identified vulnerabilities and security gaps.

Maintain audit documentation, including findings, remediation tracking, risk assessments, and compliance status.

Evaluate adherence to secure coding practices and application security policies.

Support internal and external security audits related to applications and underlying infrastructure.

Monitor emerging threats, vulnerabilities, and industry security trends to enhance security posture.

Conduct or support Vulnerability Assessment and Penetration Testing (VAPT) activities.

Provide guidance on vulnerability mitigation and remediation best practices.

Required Skills & Experience

Strong understanding of Application Security principles and best practices.

Hands-on experience with SAST and DAST tools.

Experience reviewing and analyzing vulnerability assessment reports.

Good understanding of the OWASP Top 10 and common web application security risks.

Experience with Software Composition Analysis (SCA) tools such as Black Duck or equivalent.

Experience with SAST tools such as Coverity or equivalent.

Knowledge of container, operating system, database, and infrastructure security.

Familiarity with secure software development lifecycle (SSDLC) and DevSecOps practices.

Experience working with development teams to validate and remediate security findings.

Strong documentation, audit, and reporting skills.

Preferred Qualifications

Industry‑recognized security certifications such as OSCP, CREST, CEH, CISSP, GIAC, or equivalent.

Experience in penetration testing and security assessments.

Knowledge of cloud security and container security best practices.

Understanding of regulatory and compliance requirements related to application security.

Desired Competencies

Strong analytical and problem‑solving skills.

Effective stakeholder management and cross‑functional collaboration.

Ability to communicate security findings and remediation recommendations clearly.

Continuous learning mindset with awareness of evolving cybersecurity threats and technologies.