Security Remediation Engineer

ICON OUTSOURCING; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

ICON OUTSOURCING in Singapore is seeking a security-focused engineer to triage vulnerabilities identified through SAST, DAST, and penetration testing and guide remediation across OWASP Top 10, APIs, authentication and access controls.

You will collaborate with Java and modern web teams (Angular/React) to deliver secure fixes and upgrade dependencies, validate false positives, and coordinate retesting while maintaining remediation evidence and governance dashboards.

Qualifications

• Experience in application security and vulnerability remediation.
• Familiarity with OWASP Top 10, secure SDLC and testing findings.
• Strong Java and modern web app experience (Angular/React).
• Experience with REST APIs, API security, authentication and authorization.

Responsibilities

• Triage and perform root-cause analysis of vulnerabilities identified through SAST, DAST and penetration testing.
• Implement and/or guide remediation for OWASP Top 10, API, authentication, access control and dependency vulnerabilities.
• Work with Java, Angular/React application teams to deliver secure code fixes and dependency upgrades.
• Validate false positives, coordinate security retesting/rescans and provide remediation evidence.
• Track vulnerability backlog, SLA, aging and closure status using JIRA.
• Prepare remediation reports, dashboards, exception registers and governance updates.
• Provide secure coding recommendations and drive reduction of recurring security findings.

Skills

Application Security

Vulnerability remediation

OWASP Top 10

Secure SDLC

SAST

DAST

Penetration testing

Java

Angular/React

REST APIs

API security

Authentication

Authorization

Cloud security

Secrets protection

Tools

JIRA

Job description

Roles & Responsibilities:

• Triage and perform root-cause analysis of vulnerabilities identified through SAST, DAST and penetration testing.
• Implement and/or guide remediation for OWASP Top 10, API, authentication, access control and dependency vulnerabilities.
• Work with Java, Angular/React application teams to deliver secure code fixes and dependency upgrades.
• Validate false positives, coordinate security retesting/rescans and provide remediation evidence.
• Track vulnerability backlog, SLA, aging and closure status using JIRA.
• Prepare remediation reports, dashboards, exception registers and governance updates.
• Provide secure coding recommendations and drive reduction of recurring security findings.

Skills Required

• Strong hands-on experience in Application Security and vulnerability remediation.
• Good knowledge of OWASP Top 10, secure SDLC, SAST, DAST and penetration testing findings.
• Strong Java and modern web application experience, preferably Angular/React.
• Experience with REST APIs, API security, authentication, authorization and secure coding.
• Knowledge of cloud security practices, dependency management and secrets protection.
• Experience with JIRA and vulnerability tracking/reporting processes.
• Strong analytical, communication, stakeholder-management and problem-solving skills.