Senior Vulnerability Analyst

SATS Ltd.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

SATS Ltd. is seeking an experienced Cybersecurity professional to enhance their vulnerability management program. This role involves developing metrics, coordinating risk remediation, and optimizing security processes across global operations. Ideal candidates should possess a Bachelor's degree in IT or Cybersecurity and relevant certifications, with 5 to 7 years of experience in the field.

Qualifications

• 5 to 7 years of experience in Vulnerability Management, Network Security or IT Security Engineering.
• Possession of certifications such as CISSP, CEH, SANS GIAC.
• Experience with vulnerability scanning tools and cloud environments preferred.

Responsibilities

• Establish metrics and KPI for improving risk posture.
• Coordinate vulnerability remediation across global regions.
• Perform monthly vulnerability scans and report metrics.

Skills

Vulnerability Management

Network Security

Risk Prioritization

IT/Security Engineering

Compliance Frameworks

Education

Bachelor's Degree in Information Technology

Bachelor's Degree in Cybersecurity

Tools

Tenable

Qualys

Rapid7

SAST

DAST

Job description

Company description:


About Us

Headquartered in Singapore, SATS Ltd. is one of the world's largest providers of air cargo handling services and Asia's leading airline caterer. SATS Gateway Services provides airfreight and ground handling services including passenger services, ramp and baggage handling, aviation security services, aircraft cleaning and aviation laundry. SATS Food Solutions serves airlines and institutions, and operates central kitchens with large-scale food production and distribution capabilities for a wide range of cuisines.

SATS is present in the Asia-Pacific, the Americas, Europe, the Middle East and Africa, powering an interconnected world of trade, travel and taste. Following the acquisition of Worldwide Flight Services (WFS) in 2023, the combined SATS and WFS network operates over 215 stations in 27 countries. These cover trade routes responsible for more than 50% of global air cargo volume. SATS has been listed on the Singapore Exchange since May 2000. For more information, please visit www.sats.com.sg

Why Join Us

At SATS, people are our greatest asset and we build our success on the knowledge, expertise and performance of every contributor, by embracing diversity and uniqueness. As part of our holistic approach and commitment to embracing FAM (Fulfilling, Appreciated, Meaningful) in the workplace, we offer the runway to develop Fulfilling careers that foster your career growth, recognising and Appreciating the strength of talent and capabilities that we continue to build internally; and inspiring and encouraging each other to make Meaningful contributions in the work we do at SATS.

Job description:


Key Responsibilities

Program Strategy

• Establish metrics and KPIs: Develop clear metrics (e.g., average time-to-patch, severity-based closure rates) and set targets for improving your organization's risk posture.
• Draft and maintain policies, standards, and procedures that articulate how the organization identifies, prioritizes, and remediates vulnerabilities.

Risk Prioritization & Remediation Coordination

• Analyse, prioritize, and collate vulnerability scan results for APAC, EMEA, and North America.
• Collaborate with regional Risk Remediation Leads to ensure vulnerabilities are addressed.
• Act as the Risk Remediation Lead in specific regions when required (e.g., Singapore).
• Work closely with various IT and security teams to implement fixes.

Vulnerability Scanning & Assessment

• Perform and operate monthly vulnerability scans across the global enterprise.
• Configure scans optimally, providing justifications for scan settings and recommendations.
• Schedule and troubleshoot scans while ensuring they do not cause system outages.

Metrics & Reporting

• Track and report on Known Exploited Vulnerabilities (KEV) and other Critical and High severity vulnerabilities.
• Provide quantifiable metrics and visual reporting (graphs, statistics) to demonstrate remediation progress and quantities of vulnerabilities.

Program Optimization & Continuous Improvement

• Ensure the vulnerability management program operates efficiently.
• Identify and implement vulnerability management program enhancements annually to improve risk reduction.

Key Requirements

• Bachelor's Degree in Information Technology / Cybersecurity and Forensics or equivalent professional experiences.
• Possessed cybersecurity professional certifications such as; CISSP, CEH, SANS GIAC, Microsoft, Cisco & etc.
• 5 to 7 years of progressive experience in at least one of the following disciplines:
• Vulnerability Management (program design, scanning, reporting, remediation coordination)
• Network Security & Architecture (TCP/IP, firewalls, IDS/IPS, endpoint security)
• Risk Prioritization & Scoring (e.g., CVSS, zero-day threat analysis, environment-specific risk ranking)
• IT/Security Engineering (securing Windows, Linux, and cloud platforms, deploying security tools)
• Compliance & Regulatory Frameworks (PCI-DSS, ISO 27001, NIST, etc.)
• Demonstrated ability to translate technical vulnerabilities and remediation actions into clear, actionable tasks for diverse audiences (IT, DevOps, leadership).
• Experience working with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7) and application security testing (SAST, DAST) is highly preferred.
• Familiar with cloud environments (AWS, Azure, GCP) and scripting/automation (e.g., Python, PowerShell, or API integrations) is a plus.