Vulnerability Management Operations Analyst

U3 PROJECTS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

U3 PROJECTS PTE. LTD. is seeking an experienced security professional to manage vulnerability lifecycles within CI/CD and SSDLC environments.

You will implement and operationalize SAST, DAST, and container-scanning workflows, while developing Python automation to streamline processes and reporting. The role requires strong knowledge of secure coding practices, OWASP Top 10, and threat modeling. Collaboration with development, infrastructure, and risk teams is essential to drive timely

Qualifications

• Experience in vulnerability management within CI/CD or SSDLC environments.
• Hands-on experience with tools such as OSS, SAST, Container Scanning, or similar.
• Proficiency in scripting languages (e.g. Python) for automation and data analysis.
• Strong understanding of secure coding practices and common vulnerability types (e.g. OWASP Top 10).
• Experience in root cause analysis and remediation strategy development.
• Familiarity with threat modeling methodologies and tools.
• Excellent communication and stakeholder management skills.

Responsibilities

• Manage end-to-end vulnerability lifecycle, including detection, triage, remediation tracking, and reporting.
• Integrate and operationalize vulnerability scanning tools within CI/CD and SSDLC environments (e.g., SAST, DAST, secret scanning, container scanning).
• Develop and maintain automation scripts (preferably in Python) to streamline vulnerability management workflows and reporting.
• Analyze vulnerabilities to determine root causes and recommend effective mitigating controls.
• Conduct threat modeling exercises to identify potential security risks from system architecture diagrams and design documents.
• Collaborate with development, infrastructure, and risk teams to ensure timely remediation and risk reduction.
• Communicate vulnerability findings clearly to stakeholders, articulating technical details and the business impact of mitigation strategies.
• Support continuous improvement of vulnerability management processes, tools, and metrics.

Skills

Vulnerability management

CI/CD

SSDLC

Python

OSCP

CEH

GPEN

Tools

SAST

Container Scanning

OSS

Job description

Jobdescription:(In Detail):

• Proven experience in vulnerability management within CI/CD or SSDLC environments
• Hands-on experience with tools, such as OSS, SAST, Container Scanning, or similar
• Proficiency in scripting languages (e.g. Python) for automation and data analysis
• Strong understanding of secure coding practices and common vulnerability types (e.g. OWASP Top 10)
• Experience in root cause analysis and remediation strategy development
• Familiarity with threat modeling methodologies and tools
• Excellent communication and stakeholder management skills

Responsibilities:

• Manage end-to-end vulnerability lifecycle, including detection, triage, remediation tracking, and reporting.
• Integrate and operationalize vulnerability scanning tools within CI/CD and SSDLC environments (e.g., SAST, DAST, secret scanning, container scanning).
• Develop and maintain automation scripts (preferably in Python) to streamline vulnerability management workflows and reporting.
• Analyze vulnerabilities to determine root causes and recommend effective mitigating controls.
• Conduct threat modeling exercises to identify potential security risks from system architecture diagrams and design documents.
• Collaborate with development, infrastructure, and risk teams to ensure timely remediation and risk reduction.
• Communicate vulnerability findings clearly to stakeholders, articulating technical details and the business impact of mitigation strategies.
• Support continuous improvement of vulnerability management processes, tools, and metrics.

Skillset:

• Offensive security certifications (e.g. OSCP, CEH, GPEN) are highly desirable
• Prior exposure to vulnerability management in large-scale enterprise environments
• Experience with Cloud-native security and containerized application security

SKILLS: Vulnerability Management, CI/CD, SSDLC, OSS, SAST, Container Scanning, Python, OSCP, CEH, GPEN