Application Security Consultant: Threat Modelling & DevSecOps

5G-Starlink Pte.; Singapore; In loco; SGD 90.000 - 150.000; Tempo pieno

Descrizione del lavoro

5G-Starlink Pte. is seeking an Application Security Consultant to provide security consultancy, guidance and solutions across web, mobile and API platforms. You will advise on design, drive remediation, and help develop security tests and verification scripts.

The role requires hands-on experience with penetration testing, vulnerability analysis, and threat modelling, with a focus on identifying cyber risks and delivering security improvements across our applications and networks.

Competenze

• CISSP/CCSP/CCSK/OSCP/CSSLP certification or its equivalent preferred.
• In-depth knowledge of security concepts for web, iOS, Android and REST API security.
• Proficiency with cybersecurity methodologies, tools, best practices and processes.
• Proven experience with threat modelling and risk analysis.
• Ability to gather information from multiple sources and consolidate risks for recommendations.
• Hands-on experience with penetration testing and vulnerability analysis frameworks/tools.

Mansioni

• Provide security consultancy, technical guidance, expertise and solutions.
• Advise and review application security design to detect issues and drive remediation tasks.
• Help application teams develop and implement security test and verification scripts.
• Engage in security vulnerability scanning activities (VAPT/SAST/DAST/MAST) and triage findings.
• Define scope and review results of security tests, reviews and audits to ensure security assurance.
• Identify and assess cyber risks in applications and networks.

Conoscenze

Security certifications

Web/API security

Threat modelling

Penetration testing

Risk analysis

Descrizione del lavoro

5G-Starlink Pte. is seeking an Application Security Consultant to provide security consultancy, guidance and solutions across web, mobile and API platforms. You will advise on design, drive remediation, and help develop security tests and verification scripts.

The role requires hands-on experience with penetration testing, vulnerability analysis, and threat modelling, with a focus on identifying cyber risks and delivering security improvements across our applications and networks.