Vulnerability Analyst

Manpower Staffing Services (Singapore) Pte Ltd; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

Manpower Staffing Services (Singapore) Pte Ltd is seeking a security-focused vulnerability researcher to assess, validate, and remediate vulnerabilities across the organization's systems and infrastructure.

You will perform PoC testing for identified issues, apply OWASP Top 10 knowledge to detect weaknesses, and conduct regular scanning with Tenable and Qualys while collaborating with cross-functional teams to strengthen the security posture.

Qualifications

• Experience in vulnerability research and remediation across systems/infrastructure.
• Ability to analyze security findings and prioritize remediation actions.
• Familiarity with OWASP Top 10 and threat modeling practices.

Responsibilities

• Research and analyze newly published security vulnerabilities for severity and impact.
• Perform PoC testing to validate vulnerabilities and understand exploitation potential.
• Utilize Tenable, Qualys and other scanners to identify security flaws in systems and networks.
• Demonstrate strong understanding of IPv4 and IPv6 networks and their vulnerabilities.
• Use Linux for vulnerability research and analysis.
• Collaborate with cross-functional teams to address findings promptly.
• Stay updated on emerging threats and mitigation techniques.

Skills

Vulnerability assessment

PoC testing

OWASP Top 10

Vulnerability remediation

Cross-functional collaboration

Tools

Tenable

Qualys

Other scanners

Job description

• Research and analyze newly published security vulnerabilities to assess their severity and potential impact on the organization's systems and infrastructure.
• Conduct proof of concept testing for identified vulnerabilities to validate their existence and understand their exploitation potential.
• Utilize knowledge and experience with OWASP Top 10 vulnerabilities to identify, detect, exploit, and remediate security weaknesses.
• Perform vulnerability scanning using tools such as Tenable, Qualys, and others to identify security flaws in systems and networks.
• Demonstrate a excellent understanding of IPv4 and IPv6 networks and their associated vulnerabilities.
• Utilize Linux operating systems for vulnerability research and analysis purposes.
• Collaborate with cross-functional teams to prioritize and address identified vulnerabilities in a timely manner.
• Stay informed about emerging security threats, vulnerabilities, and mitigation techniques to enhance the organization's security posture.