Vulnerability Management & Application Security Analyst

Techcom Solutions India Private Limited; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Techcom Solutions India Private Limited is seeking a Vulnerability Management Specialist to drive triage, remediation validation, and governance across the AWPT programme.

You will enhance Jira workflows, build dashboards for the vulnerability lifecycle, and implement automation to improve finding correlation and tracking. You will review AI-assisted findings, coordinate with engineering teams, and produce governance reports.

Responsibilities

• Triage vulnerabilities and validate remediation effectiveness.
• Review findings from AI-powered penetration testing tools.
• Coordinate with application teams to plan remediation.
• Escalate overdue vulnerabilities and assign owners.
• Produce governance reports and metrics.

Job description

Objective

Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT programme.

Key Responsibilities

A. Development Activities

• Enhance triage workflows and automation capabilities within Jira.
• Develop dashboards and reporting for vulnerability lifecycle management.
• Implement automation to improve finding correlation and tracking.
• Support integration with AI-powered penetration testing tools.

B. Support Activities

• Review and triage findings generated by AI-powered penetration testing tools.
• Assess exploitability, severity, technical impact, and business impact.
• Identify false positives and duplicated vulnerabilities.
• Coordinate with application teams to review findings and remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate remediation effectiveness.
• Recommend closure, risk acceptance, or severity adjustment based on evidence.

C. Process Management & Governance

• Manage vulnerability lifecycle tracking through Jira until closure.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical, disputed, or overdue vulnerabilities.
• Produce vulnerability governance reports and metrics.
• Support management updates.