Application Security Expert: Harden & Remediate Apps

UC TECH PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

UC TECH PTE. LTD. in Singapore seeks an Application Security Specialist to assess, improve and monitor the security posture of applications and supporting infrastructure, working with development, DevSecOps and infra teams.

You will review SAST/DAST results, validate vulnerability reports, drive remediation with engineering teams, and support audits while staying current with threats and industry trends. This role emphasizes strong documentation and collaboration across stakeholders.

Qualifications

• Strong understanding of Application Security principles.
• Hands-on experience with SAST and DAST tools.
• Experience reviewing vulnerability reports and providing remediation guidance.
• Familiar with OWASP Top 10 and common web risks.

Responsibilities

• Review and validate SAST/DAST results.
• Audit OS, containers, and DB vulnerability reports for risks and misconfigurations.
• Assess security hardening across apps, web servers, APIs, containers, and databases.
• Collaborate with development/DevSecOps to remediate findings.
• Maintain audit docs including findings, remediation tracking, risk assessments, and compliance status.
• Evaluate adherence to secure coding practices and SSDLC policies.
• Support internal/external security audits of apps and infra.
• Monitor threats and industry trends to enhance posture.
• Conduct or support VAPT activities.
• Provide guidance on vulnerability mitigation best practices.

Skills

Application Security

SAST & DAST

OWASP Top 10

SSDLC/DevSecOps

Vulnerability Remediation

Documentation & Reporting

VAPT

Cloud & Container Security

Security Audits & Compliance

Education

Bachelor’s degree in CS/IT

Tools

Coverity

Black Duck

Job description

UC TECH PTE. LTD. in Singapore seeks an Application Security Specialist to assess, improve and monitor the security posture of applications and supporting infrastructure, working with development, DevSecOps and infra teams.

You will review SAST/DAST results, validate vulnerability reports, drive remediation with engineering teams, and support audits while staying current with threats and industry trends. This role emphasizes strong documentation and collaboration across stakeholders.