Senior VP | Principal Application Security & Vulnerability Research

CITIBANK N.A.; Singapore; On-site; SGD 100,000 - 150,000; Full time

Job summary

A leading financial institution in Singapore is seeking a Principal Application Security Analyst. This role involves conducting vulnerability research, performing whitebox penetration testing, and reviewing source code. Candidates should have over 8 years of experience in application security and a strong proficiency in programming. Responsibilities also include mentoring junior team members and preparing technical reports for various audiences. The position promises a dynamic work environment with opportunities for knowledge sharing.

Qualifications

• 8+ years of experience in penetration testing, ethical hacking, or application security.
• Proven expertise in vulnerability research and exploit development.
• Strong proficiency in major programming languages, including Java, C#, Python.

Responsibilities

• Conduct in-depth vulnerability research and exploitation.
• Perform comprehensive whitebox penetration testing.
• Review source code across various programming languages.

Skills

Penetration testing

Vulnerability research

Source code review

Effective communication

Knowledge of OWASP Top 10

Education

8+ years of experience in application security

Tools

Static Application Security Testing (SAST) tools

Dynamic Application Security Testing (DAST) tools

Cloud platforms (AWS, Google Cloud, Azure)

Container security (Docker, Kubernetes)

Job description

A leading financial institution in Singapore is seeking a Principal Application Security Analyst. This role involves conducting vulnerability research, performing whitebox penetration testing, and reviewing source code. Candidates should have over 8 years of experience in application security and a strong proficiency in programming. Responsibilities also include mentoring junior team members and preparing technical reports for various audiences. The position promises a dynamic work environment with opportunities for knowledge sharing.