Vulnerability Management Operations Analyst

U3 INFOTECH PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

U3 INFOTECH PTE. LTD. in Singapore seeks an experienced Vulnerability Management Specialist to lead end-to-end lifecycle, integrate scanning into CI/CD/SSDLC, and automate workflows with Python.

You will analyze root causes, perform threat modeling, and collaborate with development, infrastructure, and risk teams to reduce business risk while communicating findings to stakeholders.

Qualifications

• Experience managing vulnerability lifecycles end-to-end in enterprise environments.
• Ability to integrate vulnerability scanning within CI/CD and SSDLC pipelines.
• Develop automation scripts (Python) to streamline workflows and reporting.
• Analyze vulnerabilities to identify root causes and mitigations.
• Perform threat modeling to identify risks from architecture and design.
• Collaborate with development, infrastructure, and risk teams to reduce risk.
• Excellent communication to convey findings and business impact.
• Offensive security certifications are highly desirable.

Responsibilities

• Manage end-to-end vulnerability lifecycle, including detection and triage.
• Integrate and operationalize vulnerability scanning within CI/CD/SSDLC.
• Develop and maintain Python-based automation for workflows and reporting.
• Analyze vulnerabilities for root causes and mitigation strategies.
• Conduct threat modeling on system architectures and designs.
• Collaborate with cross-functional teams to ensure timely remediation.
• Communicate findings clearly to stakeholders with business impact.
• Support continuous improvement of processes, tools, and metrics.

Skills

Vulnerability management

CI/CD

SSDLC

SAST

DAST

Container scanning

Python scripting

Secure coding practices

OWASP Top 10

Stakeholder management

Tools

SAST tools

DAST tools

Container scanning tools

Job description

• Proven experience in vulnerability management within CI/CD or SSDLC environments
• Hands-on experience with tools, such as OSS, SAST, Container Scanning, or similar
• Proficiency in scripting languages (e.g. Python) for automation and data analysis
• Strong understanding of secure coding practices and common vulnerability types (e.g. OWASP Top 10)
• Experience in root cause analysis and remediation strategy development
• Familiarity with threat modeling methodologies and tools
• Excellent communication and stakeholder management skills

Responsibilities:

• Manage end-to-end vulnerability lifecycle, including detection, triage, remediation tracking, and reporting.
• Integrate and operationalize vulnerability scanning tools within CI/CD and SSDLC environments (e.g., SAST, DAST, secret scanning, container scanning).
• Develop and maintain automation scripts (preferably in Python) to streamline vulnerability management workflows and reporting.
• Analyze vulnerabilities to determine root causes and recommend effective mitigating controls.
• Conduct threat modeling exercises to identify potential security risks from system architecture diagrams and design documents.
• Collaborate with development, infrastructure, and risk teams to ensure timely remediation and risk reduction.
• Communicate vulnerability findings clearly to stakeholders, articulating technical details and the business impact of mitigation strategies.
• Support continuous improvement of vulnerability management processes, tools, and metrics.

Skillset:

• Offensive security certifications (e.g. OSCP, CEH, GPEN) are highly desirable
• Prior exposure to vulnerability management in large-scale enterprise environments
• Experience with Cloud-native security and containerized application security