Information Technology – Senior Systems Engineer (Vulnerability Management)

SINGAPORE AIRLINES LIMITED; Singapore; On-site; SGD 75,000 - 110,000; Full time

Job summary

A leading airline company in Singapore seeks an experienced professional for vulnerability management. You will analyze vulnerability reports, oversee mitigation efforts, and offer expert recommendations. Candidates should have a Bachelor's degree and 6+ years of IT experience, with a focus on vulnerability management and penetration testing. The ideal candidate is detail-oriented with strong analytical skills and an ability to communicate effectively across teams.

Qualifications

• 6+ years of experience in IT, with 4+ years in vulnerability management.
• Strong understanding of common vulnerabilities and remediation techniques.
• Proficient in handling large datasets for detailed vulnerability analysis.

Responsibilities

• Assess and analyze vulnerability reports to determine their implications.
• Oversee vulnerabilities and ensure they are promptly mitigated.
• Perform internal vulnerability assessments and penetration testing.

Skills

Vulnerability management

Penetration testing

Threat intelligence

Root cause analysis

Analytical skills

Communication skills

Education

Bachelor’s degree

Tools

OWASP Top 10

Job description

Job Description

Key Responsibilities:

1. Assess and analyse vulnerability reports from security researchers, vendors, and tools to understand their implications on our environment.
2. Oversee vulnerabilities related to attack surfaces, ensuring they are promptly mitigated.
3. Perform internal vulnerability assessments and penetration testing while ensuring the remediation progress of identified issues.
4. Offer expert advice and recommendations to different teams on how to remediate vulnerabilities effectively.
5. Supports SIA’s red teaming, penetrating testing and bug bounty initiatives.
6. Keep updated with the latest in cyber threats, vulnerabilities, attack methods, and threat intelligence; evaluate their impact on the SIA network and systems, and initiate threat mitigation actions and advisories.
7. Develop automated solutions to contextualise data sets and vulnerability reports, yielding actionable insights.
8. Remain informed about current and emerging security solutions and improvements, proposing initiatives to fill gaps or bolster the overall SIA security posture.

Requirements:

1. Bachelor’s degree
2. At least 6 years of experience in the IT industry, with a minimum of 4 years in vulnerability management or a similar role.
3. Strong understanding of common vulnerabilities and remediation techniques (e.g. OWASP Top 10).
4. Experience with attack simulation, penetration testing, red teaming or other offensive security testing.
5. Skilled in conducting root cause analysis for vulnerabilities and determining appropriate technical solutions.
6. Proficient in handling large datasets and performing detailed vulnerability analysis.
7. Detail-oriented with excellent analytical and written communication skills.
8. Ability to clearly communicate security and risk-related concepts to both technical and non-technical audiences.
9. Capable of working independently as well as in a collaborative, team-oriented environment.
10. Preferred candidates with certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN or equivalent