Senior InfoSec Specialist — App & Infra Risk & VAPT Lead

Singtel; Singapore; On-site; Confidential; Full time

Job summary

Singtel is seeking a Senior Specialist, Information Security to strengthen our application and infrastructure security posture. You will conduct security assessments, review vulnerabilities, guide remediation, and manage security deviations in an Agile setup, partnering with development and platform teams to secure delivery while enabling business goals.

The role emphasizes cross-team collaboration, risk-informed decision making, and ongoing governance reporting across SME to Enterprise

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related discipline, or equivalent practical experience.
• 3–5 years hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).

Responsibilities

• Perform and/or review Vulnerability Assessments and Penetration Testing across applications, infrastructure, and network environments.
• Review external penetration test findings and prioritise remediation.
• Conduct secure source code reviews and advise developers on remediation strategies.
• Perform security audits, host configuration reviews, and consulting assessments.
• Conduct security risk assessments at application, infrastructure, and network levels.
• Assess and prioritise vulnerabilities based on impact and likelihood.
• Review change requests from a security risk perspective.
• Prepare, evaluate, and manage security deviation/exemption requests, including risk justification and impact analysis, validation of compensating controls, and management endorsement and tracking.
• Support governance reporting, audit requirements, and security metrics consolidation.
• Collaborate with developers, infrastructure engineers, and platform teams in an Agile environment.
• Lead discussions to coordinate timely security assessments and remediation activities.
• Act as liaison between project teams, risk teams, and external security vendors.
• Track remediation progress and ensure closure within agreed timelines.

Skills

Vulnerability Assessment

Penetration Testing

Application security

Secure SDLC

Source code reviews

Risk assessment

Security governance

Security deviations

Education

BSc in Computer Science / Information Security

Tools

OSCP

CEH

CISSP

CISM

CRISC

GIAC GPEN

GIAC GWAPT

ISO 27001 Lead Implementer

Job description

Singtel is seeking a Senior Specialist, Information Security to strengthen our application and infrastructure security posture. You will conduct security assessments, review vulnerabilities, guide remediation, and manage security deviations in an Agile setup, partnering with development and platform teams to secure delivery while enabling business goals.

The role emphasizes cross-team collaboration, risk-informed decision making, and ongoing governance reporting across SME to Enterprise