Vulnerability Management Lead / Senior Security Analyst

Exasoft Pte Ltd; Singapore; Vor Ort; SGD 90.000 - 150.000; Vollzeit

Zusammenfassung

Exasoft Pte Ltd is seeking a security-focused specialist to manage vulnerability lifecycles and risk assessments. You will review AI-driven findings, triage, and coordinate remediation with application teams to strengthen security posture.

You will contribute to vulnerability analytics, dashboards, and governance reporting while maintaining strong communication with stakeholders and ensuring timely remediation across projects.

Qualifikationen

• Review and triage findings from AI-based penetration testing tools.
• Assess exploitability, severity, technical impact, and business risk.
• Identify false positives and duplicate vulnerabilities.
• Coordinate with application teams on remediation plans.

Aufgaben

• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate fixes.
• Recommend closure upon successful remediation.
• Develop dashboards and lifecycle tracking reports.
• Improve vulnerability correlation and tracking capabilities.
• Support integration with AI-powered testing platforms.
• Manage vulnerability lifecycle tracking through Jira.
• Escalate critical or overdue vulnerabilities.
• Produce governance metrics and executive reports.

Kenntnisse

Vulnerability management

Risk assessment

Penetration testing concepts

OWASP Top 10

Security analytics

Stakeholder management

Communication

AI-assisted security testing platforms

Ausbildung

CEH

GWAPT

OSCP

CISSP

Tools

Jira

Jobbeschreibung

Responsibilities

• Review and triage findings from AI-based penetration testing tools.
• Assess exploitability, severity, technical impact, and business risk.
• Identify false positives and duplicate vulnerabilities.
• Recommend severity adjustments and risk acceptance decisions.
• Coordinate with application teams on remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate fixes.
• Recommend closure upon successful remediation.
• Enhance Jira-based triage workflows and automation.
• Develop dashboards and lifecycle tracking reports.
• Improve vulnerability correlation and tracking capabilities.
• Support integration with AI-powered testing platforms.
• Manage vulnerability lifecycle tracking through Jira.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical or overdue vulnerabilities.
• Produce governance metrics and executive reports.

Requirements

• Strong experience in Vulnerability Management and Risk Assessment.
• Good understanding of Penetration Testing concepts and OWASP Top 10.
• Hands-on experience with Jira workflow management and reporting.
• Strong knowledge of Application Security and Secure Coding principles.
• Experience with Security Analytics and Dashboarding.
• Strong communication and stakeholder management skills.
• Knowledge of AI-assisted security testing platforms is preferred.
• Relevant certifications such as CEH, GWAPT, OSCP, CISSP, or equivalent are preferred.