Vulnerability Engineer

EPERGNE SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

EPERGNE SOLUTIONS PTE. LTD. is seeking a hands-on security professional to perform penetration testing and manage vulnerabilities across applications, systems, and infrastructure.

The role focuses on identifying, validating, and remediating risks to minimize business impact. Responsibilities include triaging findings by severity and exploitability, validating vulnerabilities with solid evidence, and coordinating remediation with cross-functional teams.

Qualifications

• 2-5 years in vulnerability management or security.
• 2-3 years practical penetration testing experience.
• Knowledge of vulnerabilities, exploitation techniques, and risk assessment.
• Ability to evaluate severity, exploitability, and business impact.
• Experience with vulnerability validation, remediation tracking, and retesting.

Responsibilities

• Perform hands-on penetration testing to identify and validate vulnerabilities across applications, systems, and infrastructure.
• Triage findings by assessing exploitability, severity, and business impact.
• Identify false positives and duplicates to ensure accuracy.
• Validate vulnerabilities with appropriate testing techniques and evidence.
• Retest to confirm remediation.
• Coordinate remediation with development, infrastructure, and security teams for timely resolution.
• Manage vulnerability tickets lifecycle using Jira with updates and closures.
• Document findings, evidence, risk ratings, and remediation recommendations clearly.

Skills

Vulnerability management

Penetration testing

Security risk assessment

Exploitability assessment

Documentation & reporting

Communication skills

Tools

Jira

Job description

Job Summary

Perform hands-on penetration testing and vulnerability management to identify, validate, and remediate security risks across applications, systems, and infrastructure, ensuring robust protection and minimizing business impact.

Responsibilities

• Perform hands-on penetration testing to identify and validate security vulnerabilities across applications, systems, and infrastructure
• Triage vulnerability findings by assessing exploitability, severity, and potential business impact
• Identify and eliminate false positives and duplicate vulnerability findings to ensure accuracy
• Validate vulnerabilities using appropriate testing techniques and collect supporting evidence
• Conduct retesting to confirm successful remediation of reported vulnerabilities
• Coordinate remediation activities with development, infrastructure, and security teams to ensure timely resolution
• Manage vulnerability tickets throughout their lifecycle using Jira, ensuring timely updates, follow-ups, and closure
• Document findings, technical evidence, risk ratings, and remediation recommendations clearly and comprehensively

Required competencies and certifications

• 2-5 years of experience in vulnerability management or application/infrastructure security
• 2-3 years of practical penetration-testing experience
• Knowledge of common vulnerabilities, exploitation techniques, and security risk assessment
• Ability to evaluate vulnerability severity, exploitability, and business impact
• Experience with vulnerability validation, remediation tracking, and retesting
• Hands-on experience with Jira or similar ticketing tools
• Strong analytical, documentation, and communication skills