Threat & Vulnerability Management Specialist

Income Insurance Limited; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Income Insurance Limited is seeking a security specialist to manage vulnerabilities and coordinate external pen tests. You will assess advisories, track remediation, and support Bug Bounty activities across the organization.

You will work with DevSecOps and security tooling to ensure DAST compliance, monitor scans, and produce security metrics for quarterly management reviews. Strong communication is essential.

Qualifications

• At least 2 years in vulnerability management, assessment or similar role.
• Experience with enterprise vulnerability management tools, preferably Tenable.
• Background in web app technologies and security testing.
• Familiar with penetration testing methodologies and tools.
• Familiar with common attack techniques and threats.
• Certifications such as CISSP, OSCP, BSCP preferred.
• Hands-on experience with enterprise vulnerability tools.

Responsibilities

• Perform vulnerability scanning, asset discovery, remediation tracking against SLAs.
• Assess newly disclosed vulnerabilities and advisories for applicability and urgency.
• Coordinate pre-engagement, delivery and follow-up of external penetration tests.
• Review VAPT findings and address stakeholder questions.
• Support Bug Bounty by triaging reports and coordinating fixes.
• Troubleshoot vulnerability tools and raise support tickets as needed.
• Support CI/CD deployments to meet DAST standards and fix scan issues.
• Monitor DAST scans and perform health checks.
• Administer vulnerability management tools and assist with log extraction for investigations.
• Ensure tool changes follow procedures and perform access reviews.
• Prepare weekly/monthly VAPT metrics and reports for management.
• Support risk assessments and mitigations for remediable findings.
• Assist process improvements per management guidance.

Skills

Vulnerability management

Vulnerability assessment

Penetration testing

Tenable VM

CTEM

SAST/DAST/SCA

Burp Suite

OWASP Top 10

Kali Linux

Python

PowerShell

CVSS/EPSS

Communication

Tools

Burp Suite

OWASP ZAP

Kali Linux

Job description

Income Insurance Limited is seeking a security specialist to manage vulnerabilities and coordinate external pen tests. You will assess advisories, track remediation, and support Bug Bounty activities across the organization.

You will work with DevSecOps and security tooling to ensure DAST compliance, monitor scans, and produce security metrics for quarterly management reviews. Strong communication is essential.