Application Security Consultant

5G-Starlink Pte.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

5G-Starlink Pte. is seeking an Application Security Consultant to provide security consultancy, guidance and solutions across web, mobile and API platforms. You will advise on design, drive remediation, and help develop security tests and verification scripts.

The role requires hands-on experience with penetration testing, vulnerability analysis, and threat modelling, with a focus on identifying cyber risks and delivering security improvements across our applications and networks.

Qualifications

• CISSP/CCSP/CCSK/OSCP/CSSLP certification or its equivalent preferred.
• In-depth knowledge of security concepts for web, iOS, Android and REST API security.
• Proficiency with cybersecurity methodologies, tools, best practices and processes.
• Proven experience with threat modelling and risk analysis.
• Ability to gather information from multiple sources and consolidate risks for recommendations.
• Hands-on experience with penetration testing and vulnerability analysis frameworks/tools.

Responsibilities

• Provide security consultancy, technical guidance, expertise and solutions.
• Advise and review application security design to detect issues and drive remediation tasks.
• Help application teams develop and implement security test and verification scripts.
• Engage in security vulnerability scanning activities (VAPT/SAST/DAST/MAST) and triage findings.
• Define scope and review results of security tests, reviews and audits to ensure security assurance.
• Identify and assess cyber risks in applications and networks.

Skills

Security certifications

Web/API security

Threat modelling

Penetration testing

Risk analysis

Job description

About the job Application Security Consultant

Key Qualifications:

• Provide security consultancy, technical guidance, expertise and solutions.
• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks.
• Help application team in developing and implementing security test and verification scripts for testing and validating security controls/issues.
• Able to engage and execute security vulnerability scanning activities (VAPT/SAST/DAST/MAST activities etc) & triage security findings.
• Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.
• Identify and assess cyber risks in the application and network.
• Perform threat modelling on security-critical applications.
• Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.
• Deliver security projects, such as the implementation of security software, POC of DevSecOps tool and create rules/scripts that help identify latest security issues
• Ensure clients' compliance policies/procedures are met through ongoing security reviews, audits, and exercises.

Key Required Skills:

• CISSP/CCSP/CCSK/OSCP/CSSLP certification or its equivalent is preferred
• In-depth knowledge of security concepts regarding web, iOS, Android and Rest API security. Understanding of current and emerging security technologies and threats.
• Proficient with methodologies, tools, best practices and processes across various cybersecurity areas.
• Proven experience with threat modelling and risk analysis.
• Ability to gather written and verbal information from multiple sources, and assess and consolidate risks to provide appropriate recommendations.
• Hands-on experience with penetration testing and vulnerability analysis frameworks and tools.

Optional Skills:

• Familiar with Gov standard of security posture including planning and running Security Compliance Check, Security Vulnerability Scanning
• Familiar with IM8 policies
• Familiar with SSO, OIDC/SAML and MFA Framework