Vulnerability Management Lead / Senior Security Analyst

Exasoft Pte. Ltd.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Exasoft Pte. Ltd. in Singapore seeks a Vulnerability Management professional to triage findings from AI-based testing tools, assess exploitability and business risk, and coordinate remediation with application teams.

You will review code changes, retest fixes, enhance Jira workflows, develop dashboards, and produce governance metrics for executives. Strong knowledge of OWASP Top 10, risk assessment, and secure coding is required; CEH/OSCP/CISSP are preferred.

Qualifications

• Strong experience in Vulnerability Management and Risk Assessment.

Responsibilities

• Review and triage findings from AI-based penetration testing tools.

Skills

Vulnerability Management

Risk Assessment

Penetration Testing concepts

OWASP Top 10

Jira workflow management

Reporting

Application Security

Secure Coding principles

Security Analytics

Dashboarding

Stakeholder management

AI-assisted security testing platforms

Communication

Education

CEH

GWAPT

OSCP

CISSP

Tools

Jira

Job description

Responsibilities

• Review and triage findings from AI-based penetration testing tools.
• Assess exploitability, severity, technical impact, and business risk.
• Identify false positives and duplicate vulnerabilities.
• Recommend severity adjustments and risk acceptance decisions.
• Coordinate with application teams on remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate fixes.
• Recommend closure upon successful remediation.
• Enhance Jira-based triage workflows and automation.
• Develop dashboards and lifecycle tracking reports.
• Improve vulnerability correlation and tracking capabilities.
• Support integration with AI-powered testing platforms.
• Manage vulnerability lifecycle tracking through Jira.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical or overdue vulnerabilities.
• Produce governance metrics and executive reports.

Requirements

• Strong experience in Vulnerability Management and Risk Assessment.
• Good understanding of Penetration Testing concepts and OWASP Top 10.
• Hands-on experience with Jira workflow management and reporting.
• Strong knowledge of Application Security and Secure Coding principles.
• Experience with Security Analytics and Dashboarding.
• Strong communication and stakeholder management skills.
• Knowledge of AI-assisted security testing platforms is preferred.
• Relevant certifications such as CEH, GWAPT, OSCP, CISSP, or equivalent are preferred.