Vulnerability Management Operations Analyst

U3 SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

U3 SOLUTIONS PTE. LTD.

seeks an experienced Vulnerability Management Specialist to own the end-to-end lifecycle within CI/CD and SSDLC environments, driving detection, triage, remediation tracking and reporting. You will integrate and operate vulnerability scanning tools (SAST, DAST, container scanning), develop automation scripts in Python, analyze root causes, and work with development, infrastructure and risk teams to reduce risk.

Qualifications

• Proven experience in vulnerability management within CI/CD or SSDLC environments.
• Hands-on experience with tools, such as OSS, SAST, Container Scanning, or similar.
• Proficiency in scripting languages (e.g. Python) for automation and data analysis.
• Strong understanding of secure coding practices and common vulnerability types (e.g. OWASP Top 10).
• Experience in root cause analysis and remediation strategy development.
• Familiarity with threat modeling methodologies and tools.
• Excellent communication and stakeholder management skills.

Responsibilities

• Manage end-to-end vulnerability lifecycle, including detection, triage, remediation tracking, and reporting.
• Integrate and operationalize vulnerability scanning tools within CI/CD and SSDLC environments (e.g., SAST, DAST, secret scanning, container scanning).
• Develop and maintain automation scripts (preferably in Python) to streamline vulnerability management workflows and reporting.
• Analyze vulnerabilities to determine root causes and recommend effective mitigating controls.
• Conduct threat modeling exercises to identify potential security risks from system architecture diagrams and design documents.
• Collaborate with development, infrastructure, and risk teams to ensure timely remediation and risk reduction.
• Communicate vulnerability findings clearly to stakeholders, articulating technical details and the business impact of mitigation strategies.
• Support continuous improvement of vulnerability management processes, tools, and metrics.

Skills

Vulnerability Management

CI/CD

SSDLC

OSS

SAST

Container Scanning

Python

OSCP

CEH

GPEN

OWASP Top 10

Tools

SAST

Container Scanning

OSS

Job description

• Proven experience in vulnerability management within CI/CD or SSDLC environments
• Hands-on experience with tools, such as OSS, SAST, Container Scanning, or similar
• Proficiency in scripting languages (e.g. Python) for automation and data analysis
• Strong understanding of secure coding practices and common vulnerability types (e.g. OWASP Top 10)
• Experience in root cause analysis and remediation strategy development
• Familiarity with threat modeling methodologies and tools
• Excellent communication and stakeholder management skills

Responsibilities:

• Manage end-to-end vulnerability lifecycle, including detection, triage, remediation tracking, and reporting.
• Integrate and operationalize vulnerability scanning tools within CI/CD and SSDLC environments (e.g., SAST, DAST, secret scanning, container scanning).
• Develop and maintain automation scripts (preferably in Python) to streamline vulnerability management workflows and reporting.
• Analyze vulnerabilities to determine root causes and recommend effective mitigating controls.
• Conduct threat modeling exercises to identify potential security risks from system architecture diagrams and design documents.
• Collaborate with development, infrastructure, and risk teams to ensure timely remediation and risk reduction.
• Communicate vulnerability findings clearly to stakeholders, articulating technical details and the business impact of mitigation strategies.
• Support continuous improvement of vulnerability management processes, tools, and metrics.

Skillset :

• Offensive security certifications (e.g. OSCP, CEH, GPEN) are highly desirable
• Prior exposure to vulnerability management in large-scale enterprise environments
• Experience with Cloud-native security and containerized application security

SKILLS: Vulnerability Management, CI/CD, SSDLC, OSS, SAST, Container Scanning, Python, OSCP, CEH, GPEN