Application Security Specialist: SAST/DAST & Remediation

UC Tech Pte Ltd; Singapore; On-site; SGD 90,000 - 180,000; Full time

Job summary

UC Tech Pte Ltd in Singapore is seeking an Application Security Specialist to strengthen the security posture of its applications and supporting infrastructure. You will work with development, DevSecOps, and operations teams to identify, analyze, and remediate vulnerabilities while ensuring compliance with security standards.

You will review SAST/DAST results, audit container and OS security, support audits, and drive remediation with engineering teams.

Qualifications

• Strong understanding of application security principles and best practices.
• Hands-on experience with SAST and DAST tools.
• Experience reviewing vulnerability assessment reports.
• Knowledge of OWASP Top 10 and common web application security risks.
• Experience with SCA tools such as Black Duck or equivalents.
• Familiarity with SSDLC and DevSecOps practices.

Responsibilities

• Review and validate SAST/DAST results.
• Audit OS, containers, and DB vulnerability scans.
• Assess security hardening across app components.
• Collaborate with dev/DevSecOps to remediate findings.
• Maintain audit documentation and remediation tracking.
• Support security audits of apps and infra.
• Monitor threats and advise on mitigations.
• Conduct or support VAPT activities.
• Provide guidance on remediation best practices.

Skills

Application security

SAST

DAST

Vulnerability assessment

OWASP Top 10

SSDLC/DevSecOps

Documentation & reporting

Tools

Black Duck

Coverity

Kubernetes

Docker

Job description

UC Tech Pte Ltd in Singapore is seeking an Application Security Specialist to strengthen the security posture of its applications and supporting infrastructure. You will work with development, DevSecOps, and operations teams to identify, analyze, and remediate vulnerabilities while ensuring compliance with security standards.

You will review SAST/DAST results, audit container and OS security, support audits, and drive remediation with engineering teams.