Cybersecurity Analyst – Application Security

PERSOL Outsourcing; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PERSOL Outsourcing in Singapore is seeking an experienced Application Security professional to conduct security reviews across applications and APIs, analyze findings from SAST/DAST/SCA tools, and assess exploitability and business impact. The role collaborates with DevOps to remediate vulnerabilities and support secure SDLC practices.

You will maintain risk documentation and support security risk assessments for new projects, ensuring secure CI/CD implementations and effective remediation

Qualifications

• Degree or diploma in Cybersecurity, IT, Computer Science or a related discipline
• 3-5 years of relevant experience in Application Security, Cybersecurity, Vulnerability Management or DevSecOps
• Hands-on experience with SAST, SCA, DAST tools and vulnerability assessment
• Good knowledge of OWASP Top 10, web application security, API security and common vulnerabilities
• Ability to assess exploitability, business impact, reachable code paths and remediation requirements
• Understanding of Secure SDLC, DevSecOps and CI/CD security controls

Responsibilities

• Conduct application security reviews across applications, APIs and development projects
• Analyze findings from SAST, SCA and DAST tools to determine vulnerability applicability, exploitability and business impact
• Assess vulnerabilities including reachable code paths, false positives and non-applicable findings
• Review security waiver and risk acceptance requests with justifications and compensating controls
• Collaborate with development and DevOps teams to remediate and track vulnerabilities to closure
• Support integration of application security controls into DevSecOps practices and CI/CD pipelines
• Conduct or support security risk assessments for new applications, system changes and APIs
• Maintain security assessment reports, vulnerability records and risk documentation

Skills

Application Security

Vulnerability Management

DevSecOps

CI/CD Security

Analytical Skills

Documentation

Communication

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

SAST Tools

SCA Tools

DAST Tools

Job description

• Conduct application security reviews and assessments across applications, APIs and development projects
• Analyze findings from SAST, SCA and DAST tools to determine vulnerability applicability, exploitability and business impact
• Assess application and dependency vulnerabilities, including reachable code paths, false positives and non-applicable findings
• Review security waiver and risk acceptance requests, including justifications, compensating controls and residual risks
• Collaborate with development and DevOps teams to recommend remediation measures and track vulnerabilities through to closure
• Support the integration of application security controls into DevSecOps practices and CI/CD pipelines, including security scanning and security gates
• Conduct or support security risk assessments for new applications, system changes, APIs, cloud environments and technology implementations
• Maintain security assessment reports, vulnerability records and risk documentation in accordance with established security policies

Job Requirements:

• Degree or diploma in Cybersecurity, IT, Computer Science or a related discipline
• 3-5 years of relevant experience in Application Security, Cybersecurity, Vulnerability Management or DevSecOps
• Hands-on experience with SAST, SCA, DAST tools and vulnerability assessment
• Good knowledge of Open Worldwide Application Security Project (OWASP) Top 10, web application security, API security and common vulnerabilities
• Ability to assess exploitability, business impact, reachable code paths and remediation requirements
• Understanding of Secure SDLC, DevSecOps and CI/CD security controls
• Knowledge of cloud security, preferably AWS, is an advantage
• Experience in security risk assessments, vulnerability triage and risk acceptance is preferredRelevant cybersecurity certifications are advantageous
• Strong analytical, documentation and communication skills with the ability to work effectively with technical and non-technical teams