Application Security Operations Lead, Technology Firm

Kerry Consulting; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Kerry Consulting partners with a Technology Firm to appoint an Application Security Operations Lead. You will lead a lean team responsible for assessing and prioritising vulnerability submissions, serving as the technical escalation point for complex findings.

The role blends hands-on security expertise with leadership, workflow improvements and automation through scripting and platform integrations. You will work with stakeholders and researchers to drive remediation and report trends to

Qualifications

• Degree in Cybersecurity, Computer Science or a related discipline, with an OSCP certification.
• Strong technical understanding of web application vulnerabilities, OWASP Top 10, vulnerability validation, severity assessment and remediation practices.
• Hands-on proficiency with offensive security tools such as Burp Suite and Kali Linux, with the ability to independently investigate and validate complex security findings.
• Demonstrated experience in team leadership, mentoring and security operations, with the ability to manage operational priorities, improve processes and drive efficiency through scripting or automation.
• Excellent analytical, communication and stakeholder management skills. Prior exposure to bug bounty programmes, vulnerability disclosure programmes or regulated environments would be advantageous.

Responsibilities

• Oversee vulnerability triage, validation and prioritisation across enterprise environments.
• Serve as the technical escalation point for complex findings with accurate severity assessments and remediation guidance.
• Establish triage standards, improve workflows and drive automation through scripting and integrations.
• Collaborate with stakeholders, system owners and researchers to facilitate vulnerability resolution and reporting to management.

Skills

Vulnerability management

OWASP Top 10

Vulnerability validation

Remediation practices

Team leadership

Automation scripting

Stakeholder communication

Education

Cybersecurity degree

OSCP certification

Tools

Burp Suite

Kali Linux

Job description

We are partnering with an established Technology Firm to appoint an Application Security Operations Lead. This is an opportunity for an experienced cybersecurity professional to lead a specialised team responsible for vulnerability triage and validation across complex enterprise environments. The role combines hands-on technical expertise, team leadership and operational excellence, with a strong emphasis on strengthening application security posture through effective vulnerability management.

Role

Reporting into the cybersecurity function, you will oversee a lean team of security specialists responsible for assessing, validating and prioritising vulnerability submissions from security researchers and vulnerability disclosure programmes. You will serve as the technical escalation point for complex findings, ensuring accurate severity assessments and actionable remediation recommendations. Beyond day-to-day operations, you will establish consistent triage standards, improve workflows and drive automation through scripting and platform integrations. You will also work closely with technical stakeholders, system owners and security researchers to facilitate vulnerability resolution, analyse emerging vulnerability trends and provide meaningful reporting to management.

Requirements

Degree in Cybersecurity, Computer Science or a related discipline, with an OSCP certification.

Strong technical understanding of web application vulnerabilities, OWASP Top 10, vulnerability validation, severity assessment and remediation practices.

Hands-on proficiency with offensive security tools such as Burp Suite and Kali Linux, with the ability to independently investigate and validate complex security findings.

Demonstrated experience in team leadership, mentoring and security operations, with the ability to manage operational priorities, improve processes and drive efficiency through scripting or automation.

Excellent analytical, communication and stakeholder management skills. Prior exposure to bug bounty programmes, vulnerability disclosure programmes or regulated environments would be advantageous.

License No: 16S8060 Registration no: R1988923