Vulnerability Management & Risk Analyst

RAPSYS TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

RAPSYS TECHNOLOGIES PTE. LTD. in Singapore seeks a Security Analyst to own end-to-end vulnerability management across the organization. You will triage findings, classify risk, and drive remediation with engineering and DevOps teams.

This role requires 2+ years in information security, hands-on scanning with Tenable/Qualys/Rapid7, and strong communication with technical and business stakeholders. You will produce dashboards, support audits, and advance threat intelligence efforts.

Qualifications

• 2+ years of information security or vulnerability management experience.
• Hands-on experience with vulnerability scanning platforms (Tenable, Qualys, Rapid7, Wiz).
• Solid understanding of CVSS scoring and risk-based prioritization.
• Experience communicating findings to technical teams and business stakeholders.
• Familiarity with NIST CSF, ISO 27001, SOC 2.
• Familiarity with GovTech IM8 policies and risk-based assessment methodology.
• Strong organizational skills to manage multiple workstreams and deadlines.

Responsibilities

• Own end-to-end vulnerability management lifecycle from intake to closure.
• Classify vulnerabilities by severity and business impact using CVSS/EPSS.
• Plan and manage quarterly vulnerability assessments.
• Manage yearly penetration testing: scoping, vendor coordination, remediation tracking.
• Track remediation across teams and ensure documentation and sign-off.
• Coordinate with engineering/DevOps/infrastructure for timely resolutions.
• Maintain risk acceptance records with approvals.
• Track remediation SLAs and escalate overdue/high-risk items.
• Produce status reports and dashboards for stakeholders.
• Aggregate data from multiple scanners into unified risk view.
• Develop metrics and KPIs for leadership visibility.
• Present findings and recommendations in reports and briefings.
• Act as liaison between security and remediation owners.
• Continuously improve vulnerability management workflows and tooling.
• Support audit/compliance with evidence of tracking and risk treatment.
• Contribute to threat intelligence and stay current on CVEs.

Skills

Vulnerability management

Security incident remediation

Risk-based prioritization

Stakeholder communication

Governance & compliance

Threat & risk reporting

Tools

Tenable

Qualys

Rapid7

Wiz

Jira

ServiceNow

Job description

RAPSYS TECHNOLOGIES PTE. LTD. in Singapore seeks a Security Analyst to own end-to-end vulnerability management across the organization. You will triage findings, classify risk, and drive remediation with engineering and DevOps teams.

This role requires 2+ years in information security, hands-on scanning with Tenable/Qualys/Rapid7, and strong communication with technical and business stakeholders. You will produce dashboards, support audits, and advance threat intelligence efforts.