Security Analyst

ELION SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

ELION SOLUTIONS PTE. LTD. is seeking a Vulnerability Management Analyst to support the AWPT program by triaging findings, validating remediation, and coordinating stakeholders to close security findings from AI-powered testing tools.

You will triage, validate fixes, enhance Jira workflows, develop dashboards, and collaborate with application teams to ensure timely remediation and strong risk visibility.

Qualifications

• Vulnerability management and risk assessment experience
• Knowledge of penetration testing concepts and OWASP Top 10
• Jira workflow management and reporting skills
• Application security and secure coding principles

Responsibilities

• Review AI-based findings to assess exploitability, severity, and business risk.
• Identify false positives and duplicates to improve accuracy of vulnerability data.
• Recommend severity adjustments and risk acceptance decisions based on risk assessment.
• Coordinate with application teams to validate remediation plans.
• Review code changes, logs, and evidence to confirm remediation effectiveness.
• Retest vulnerabilities and verify fixes before closure; enhance Jira triage workflows.
• Develop dashboards and lifecycle tracking reports to monitor status and trends.
• Improve vulnerability correlation and tracking for visibility.
• Support integration with AI-powered testing platforms to optimize assessments.
• Manage vulnerability lifecycle tracking through Jira to ensure timely resolution.
• Coordinate stakeholders to resolve vulnerability-related issues across teams.
• Escalate critical or overdue vulnerabilities to leadership for action.
• Produce governance metrics and executive reports.

Skills

Vulnerability Mgmt

OWASP Top 10

Jira workflow

Secure coding principles

Security analytics

Stakeholder management

Education

Security certifications (CEH, GWAPT, OSCP, CISSP)

Tools

Jira

Job description

WE are looking for a Vulnerability Management Analyst supports the AWPT program by triaging vulnerabilities, validating remediation, coordinating stakeholders, and managing the vulnerability lifecycle to ensure timely closure of security findings from AI-powered penetration testing tools.

Responsibilities

• Review and triage findings from AI-based penetration testing tools to assess exploitability, severity, technical impact, and business risk
• Identify false positives and duplicate vulnerabilities to improve accuracy of vulnerability data
• Recommend severity adjustments and risk acceptance decisions based on thorough risk assessment
• Coordinate with application teams to develop and validate remediation plans
• Review code changes, logs, and supporting evidence to confirm remediation effectiveness
• Retest vulnerabilities and validate fixes to ensure successful remediation before closureEnhance Jira-based triage workflows and automation to streamline vulnerability management processes
• Develop dashboards and lifecycle tracking reports to monitor vulnerability status and trends
• Improve vulnerability correlation and tracking capabilities for comprehensive risk visibility
• Support integration efforts with AI-powered testing platforms to optimize security assessments
• Manage vulnerability lifecycle tracking through Jira to ensure timely issue resolution
• Coordinate stakeholders and facilitate resolution of vulnerability-related issues across teams
• Escalate critical or overdue vulnerabilities to appropriate leadership for prompt action
• Produce governance metrics and executive reports to inform decision-making and compliance

Required competencies and certifications

• Vulnerability Management and Risk Assessment
• Penetration Testing concepts and OWASP Top 10 knowledge
• Jira workflow management and reporting skills
• Application Security and Secure Coding principles
• Security analytics and dashboard development
• Strong communication and stakeholder management skills

Preferred competencies and qualifications

• CEH, GWAPT, OSCP, CISSP, or equivalent certifications
• Experience in vulnerability governance for large enterprises
• Knowledge of AI-assisted security testing platforms