Security Remediation Engineer

TANGSPAC SEARCH PRIVATE LIMITED; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

TANGSPAC SEARCH PRIVATE LIMITED invites a security-focused engineer to triage and remediate vulnerabilities in Java-based and modern web applications, working with Angular/React teams. You will drive secure coding practices, validate findings, and manage backlog in JIRA from Singapore.

The role emphasizes strong collaboration with stakeholders and delivering governance updates. The ideal candidate has hands-on app security experience, OWASP Top 10 expertise, and APIs/security know-how, with a

Qualifications

• Strong hands-on experience in Application Security and vulnerability remediation.
• Good knowledge of OWASP Top 10, secure SDLC, SAST, DAST and pentest findings.
• Strong Java and modern web app experience, preferably Angular/React.
• Experience with REST APIs, API security, authn/authz, and secure coding.
• Knowledge of cloud security practices, dependency management, and secrets protection.
• Experience with JIRA and vulnerability tracking/reporting processes.
• Excellent analytical, communication, and stakeholder-management skills.

Responsibilities

• Triage and perform root-cause analysis of vulnerabilities from SAST, DAST and pentests.
• Implement or guide remediation for OWASP Top 10 and API/security issues.
• Collaborate with Java and Angular/React teams to fix security defects.
• Validate false positives, coordinate retesting and provide remediation evidence.
• Track vulnerability backlog, SLA, aging and closure in JIRA.
• Prepare remediation reports, dashboards and governance updates.
• Provide secure coding recommendations and reduce recurring findings.

Skills

Application Security

OWASP Top 10

Secure SDLC

SAST/DAST

Java

Angular/React

REST APIs Security

Cloud Security

JIRA

Vulnerability Tracking

Communication

Stakeholder Management

Problem Solving

Job description

Job Description & Requirements

Roles & Responsibilities:

• Triage and perform root-cause analysis of vulnerabilities identified through SAST, DAST and penetration testing.
• Implement and/or guide remediation for OWASP Top 10, API, authentication, access control and dependency vulnerabilities.
• Work with Java, Angular/React application teams to deliver secure code fixes and dependency upgrades.
• Validate false positives, coordinate security retesting/rescans and provide remediation evidence.
• Track vulnerability backlog, SLA, aging and closure status using JIRA.
• Prepare remediation reports, dashboards, exception registers and governance updates.
• Provide secure coding recommendations and drive reduction of recurring security findings.

Skills Required

• Strong hands‑on experience in Application Security and vulnerability remediation.
• Good knowledge of OWASP Top 10, secure SDLC, SAST, DAST and penetration testing findings.
• Strong Java and modern web application experience, preferably Angular/React.
• Experience with REST APIs, API security, authentication, authorization and secure coding.
• Knowledge of cloud security practices, dependency management and secrets protection.
• Experience with JIRA and vulnerability tracking/reporting processes.
• Strong analytical, communication, stakeholder‑management and problem‑solving skills.

EA License No. R1877766| EA Reg. No 25C2690