Security Remediation Engineer

TANGSPAC CONSULTING PTE LTD; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

TANGSPAC Consulting PTE LTD in Singapore is seeking an experienced Application Security Specialist to triage vulnerabilities from SAST, DAST and penetration testing and drive remediation across Java and modern web applications such as Angular or React.

You will validate false positives, coordinate security retests, and maintain remediation reports, dashboards and governance updates using JIRA, while promoting secure coding practices and reducing recurring findings.

Qualifications

• Strong hands-on experience in Application Security and vulnerability remediation.
• Good knowledge of OWASP Top 10, secure SDLC, SAST/DAST and pen-testing findings.
• Strong Java and modern web app experience, preferably Angular/React.
• Experience with REST APIs, API security, authentication and authorization.
• Knowledge of cloud security practices, dependency management and secrets protection.
• Experience with JIRA and vulnerability tracking/reporting processes.
• Strong analytical, communication and stakeholder-management skills.

Responsibilities

• Triage and perform root-cause analysis of vulnerabilities identified through SAST, DAST and penetration testing.
• Implement and/or guide remediation for OWASP Top 10, API, authentication, access control and dependency vulnerabilities.
• Work with Java, Angular/React application teams to deliver secure code fixes and dependency upgrades.
• Validate false positives, coordinate security retesting/rescans and provide remediation evidence.
• Track vulnerability backlog, SLA, aging and closure status using JIRA.
• Prepare remediation reports, dashboards, exception registers and governance updates.
• Provide secure coding recommendations and drive reduction of recurring security findings.

Skills

Application Security

OWASP Top 10

Web Applications

REST APIs Security

Cloud Security

JIRA

Vulnerability remediation

Tools

JIRA

Job description

Roles & Responsibilities:

• Triage and perform root-cause analysis of vulnerabilities identified through SAST, DAST and penetration testing.
• Implement and/or guide remediation for OWASP Top 10, API, authentication, access control and dependency vulnerabilities.
• Work with Java, Angular/React application teams to deliver secure code fixes and dependency upgrades.
• Validate false positives, coordinate security retesting/rescans and provide remediation evidence.
• Track vulnerability backlog, SLA, aging and closure status using JIRA.
• Prepare remediation reports, dashboards, exception registers and governance updates.
• Provide secure coding recommendations and drive reduction of recurring security findings.

Skills Required

• Strong hands-on experience in Application Security and vulnerability remediation.
• Good knowledge of OWASP Top 10, secure SDLC, SAST, DAST and penetration testing findings.
• Strong Java and modern web application experience, preferably Angular/React.
• Experience with REST APIs, API security, authentication, authorization and secure coding.
• Knowledge of cloud security practices, dependency management and secrets protection.
• Experience with JIRA and vulnerability tracking/reporting processes.
• Strong analytical, communication, stakeholder-management and problem-solving skills.