Vulnerability Management & AWPT Security Analyst

HCL Technologies Limited; Singapore; Vor Ort; SGD 70.000 - 110.000; Vollzeit

Zusammenfassung

HCL Technologies Limited is seeking a Vulnerability Management Analyst to support the AWPT program. Responsibilities include triage, remediation validation, stakeholder coordination, and lifecycle management of security findings from AI-powered testing platforms.

The role emphasizes timely assessment, tracking, and closure of vulnerabilities with strong collaboration across application teams. The ideal candidate will demonstrate expertise in vulnerability management, risk assessment, and

Qualifikationen

• Vulnerability management and risk assessment.
• Penetration testing concepts and OWASP Top 10.
• Jira workflow management and reporting.
• Application security and secure coding principles.
• Security analytics and dashboarding.
• Strong communication and stakeholder management skills.

Aufgaben

• Vulnerability Triage & Analysis: Review and triage findings from AI-based penetration testing tools; Assess exploitability, severity, technical impact, and business risk; Identify false positives and duplicate vulnerabilities; Recommend severity adjustments and risk acceptance decisions.
• Remediation Validation: Coordinate with application teams on remediation plans; Review code changes, logs, and supporting evidence; Retest vulnerabilities and validate fixes; Recommend closure upon successful remediation.
• Automation & Reporting: Enhance Jira-based triage workflows and automation; Develop dashboards and lifecycle tracking reports; Improve vulnerability correlation and tracking capabilities; Support integration with AI-powered testing platforms.
• Governance & Stakeholder Management: Manage vulnerability lifecycle tracking through Jira; Coordinate stakeholders and facilitate issue resolution; Escalate critical or overdue vulnerabilities; Produce governance metrics and executive reports.
• Required Skills: Vulnerability Management and Risk Assessment; Penetration Testing concepts and OWASP Top 10; Jira workflow management and reporting; Application Security and Secure Coding principles; Security analytics and dashboarding; Strong communication and stakeholder management skills.

Kenntnisse

Vulnerability management

Penetration testing concepts

Jira workflow management

Application security

Security analytics

Stakeholder management

Tools

Jira

Jobbeschreibung

The Vulnerability Management Analyst will support the AWPT program through vulnerability triage, remediation validation, stakeholder coordination, and vulnerability lifecycle management. The role will ensure timely assessment, tracking, and closure of security findings generated through AI-powered penetration testing platforms.

Key Responsibilities

Vulnerability Triage & Analysis

• Review and triage findings from AI-based penetration testing tools.
• Assess exploitability, severity, technical impact, and business risk.
• Identify false positives and duplicate vulnerabilities.
• Recommend severity adjustments and risk acceptance decisions.

Remediation Validation

• Coordinate with application teams on remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate fixes.
• Recommend closure upon successful remediation.

Automation & Reporting

• Enhance Jira-based triage workflows and automation.
• Develop dashboards and lifecycle tracking reports.
• Improve vulnerability correlation and tracking capabilities.
• Support integration with AI-powered testing platforms.

Governance & Stakeholder Management

• Manage vulnerability lifecycle tracking through Jira.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical or overdue vulnerabilities.
• Produce governance metrics and executive reports.

Required Skills

• Vulnerability Management and Risk Assessment.
• Penetration Testing concepts and OWASP Top 10.
• Jira workflow management and reporting.
• Application Security and Secure Coding principles.
• Security analytics and dashboarding.
• Strong communication and stakeholder management skills.

Preferred Qualifications

• CEH, GWAPT, OSCP, CISSP, or equivalent certifications.
• Experience in vulnerability governance for large enterprises.
• Knowledge of AI-assisted security testing platforms