Application Security Analyst/Specialist

UC TECH PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

UC TECH PTE. LTD. in Singapore seeks an Application Security Specialist to assess, improve and monitor the security posture of applications and supporting infrastructure, working with development, DevSecOps and infra teams.

You will review SAST/DAST results, validate vulnerability reports, drive remediation with engineering teams, and support audits while staying current with threats and industry trends. This role emphasizes strong documentation and collaboration across stakeholders.

Qualifications

• Strong understanding of Application Security principles.
• Hands-on experience with SAST and DAST tools.
• Experience reviewing vulnerability reports and providing remediation guidance.
• Familiar with OWASP Top 10 and common web risks.

Responsibilities

• Review and validate SAST/DAST results.
• Audit OS, containers, and DB vulnerability reports for risks and misconfigurations.
• Assess security hardening across apps, web servers, APIs, containers, and databases.
• Collaborate with development/DevSecOps to remediate findings.
• Maintain audit docs including findings, remediation tracking, risk assessments, and compliance status.
• Evaluate adherence to secure coding practices and SSDLC policies.
• Support internal/external security audits of apps and infra.
• Monitor threats and industry trends to enhance posture.
• Conduct or support VAPT activities.
• Provide guidance on vulnerability mitigation best practices.

Skills

Application Security

SAST & DAST

OWASP Top 10

SSDLC/DevSecOps

Vulnerability Remediation

Documentation & Reporting

VAPT

Cloud & Container Security

Security Audits & Compliance

Education

Bachelor’s degree in CS/IT

Tools

Coverity

Black Duck

Job description

Only native Singaporeans will be considered

Job Description

The Application Security Specialist is responsible for assessing, validating, and improving the security posture of applications and supporting infrastructure. The role involves working closely with development, DevSecOps, and infrastructure teams to identify, analyze, and remediate security vulnerabilities while ensuring compliance with security standards and best practices.

Key Responsibilities

• Review and validate results from Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools.
• Audit operating systems, containers, and database vulnerability scan reports to identify security risks and misconfigurations.
• Assess the effectiveness of security hardening measures across application components, including web servers, APIs, containers, and databases.
• Collaborate with application development and DevSecOps teams to drive remediation of identified vulnerabilities and security gaps.
• Maintain audit documentation, including findings, remediation tracking, risk assessments, and compliance status.
• Evaluate adherence to secure coding practices and application security policies.
• Support internal and external security audits related to applications and underlying infrastructure.
• Monitor emerging threats, vulnerabilities, and industry security trends to enhance security posture.
• Conduct or support Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Provide guidance on vulnerability mitigation and remediation best practices.

Required Skills & Experience

• Strong understanding of Application Security principles and best practices.
• Hands-on experience with SAST and DAST tools.
• Experience reviewing and analyzing vulnerability assessment reports.
• Good understanding of the OWASP Top 10 and common web application security risks.
• Experience with Software Composition Analysis (SCA) tools such as Black Duck or equivalent.
• Experience with SAST tools such as Coverity or equivalent.
• Knowledge of container, operating system, database, and infrastructure security.
• Familiarity with secure software development lifecycle (SSDLC) and DevSecOps practices.
• Experience working with development teams to validate and remediate security findings.
• Strong documentation, audit, and reporting skills.

Preferred Qualifications

• Industry-recognized security certifications such as OSCP, CREST, CEH, CISSP, GIAC, or equivalent.
• Experience in penetration testing and security assessments.
• Knowledge of cloud security and container security best practices.
• Understanding of regulatory and compliance requirements related to application security.

Desired Competencies

• Strong analytical and problem-solving skills.
• Effective stakeholder management and cross-functional collaboration.
• Ability to communicate security findings and remediation recommendations clearly.
• Continuous learning mindset with awareness of evolving cybersecurity threats and technologies.