Senior Security Analyst

Exasoft; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Exasoft is seeking a Vulnerability Management Analyst to support the AWPT program. You will triage findings, assess risk, coordinate remediation, and validate fixes across the vulnerability lifecycle. The role emphasizes automation, reporting, and governance with stakeholders and leadership.

You will work with AI-powered testing platforms, enhance Jira processes, and deliver governance metrics and executive reports to ensure timely closure of security findings.

Qualifications

• Experience in vulnerability management and risk assessment.
• Knowledge of OWASP Top 10 and pen testing concepts.
• Proficiency with Jira for triage, tracking and reporting.
• Understanding secure coding practices and application security.
• Ability to build dashboards and security analytics reports.
• Strong communication and stakeholder management skills.

Responsibilities

• Triage and analyze vulnerabilities from AI/automated testing platforms.
• Coordinate remediation with application teams and validate fixes.
• Develop Jira-based workflows, dashboards, and lifecycle metrics.
• Governance: track vulnerabilities, escalate overdue items, and report to stakeholders.

Skills

Vulnerability management

Penetration testing concepts

Jira workflow management

Application security

Security analytics

Stakeholder management

Job description

The Vulnerability Management Analyst will support the AWPT program through vulnerability triage, remediation validation, stakeholder coordination, and vulnerability lifecycle management. The role will ensure timely assessment, tracking, and closure of security findings generated through AI-powered penetration testing platforms.

Key Responsibilities

Vulnerability Triage & Analysis

• Review and triage findings from AI-based penetration testing tools.
• Assess exploitability, severity, technical impact, and business risk.
• Identify false positives and duplicate vulnerabilities.
• Recommend severity adjustments and risk acceptance decisions.

Remediation Validation

• Coordinate with application teams on remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate fixes.
• Recommend closure upon successful remediation.

Automation & Reporting

• Enhance Jira-based triage workflows and automation.
• Develop dashboards and lifecycle tracking reports.
• Improve vulnerability correlation and tracking capabilities.
• Support integration with AI-powered testing platforms.

Governance & Stakeholder Management

• Manage vulnerability lifecycle tracking through Jira.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical or overdue vulnerabilities.
• Produce governance metrics and executive reports.

Required Skills

• Vulnerability Management and Risk Assessment.
• Penetration Testing concepts and OWASP Top 10.
• Jira workflow management and reporting.
• Application Security and Secure Coding principles.
• Security analytics and dashboarding.
• Strong communication and stakeholder management skills.

Preferred Qualifications

• CEH, GWAPT, OSCP, CISSP, or equivalent certifications.
• Experience in vulnerability governance for large enterprises.