Vulnerability Management & Security Analyst

RAPSYS TECHNOLOGIES PTE LTD; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

RAPSYS Technologies PTE LTD in Singapore is seeking a detail-oriented Security Analyst to strengthen our information security program. You will own vulnerability management, risk assessment, and incident response coordination while aligning with NIST CSF and ISO 27001 controls.

You will collaborate with engineering, DevOps, and compliance teams to triage findings, drive remediation, and report on security posture to leadership.

Qualifications

• Minimum 2+ years in information security, vulnerability management or related role.
• Hands-on experience with vulnerability scanning platforms (e.g., Tenable, Qualys, Rapid7, Wiz).
• Solid understanding of CVSS, vulnerability classification and risk-based prioritization.
• Experience communicating security findings to technical and business stakeholders.
• Familiarity with NIST CSF, ISO 27001, SOC 2.
• Knowledge of GovTech policies or risk assessment methodologies is a plus.

Responsibilities

• Own and manage end-to-end Vulnerability Management with intake, triage, and lifecycle tracking of findings.
• Classify vulnerabilities by severity, exploitability, and business impact.
• Plan and manage Quarterly Vulnerability Assessments and yearly Penetration Testing cycle.
• Track remediation SLAs and coordinate with remediation teams to ensure timely closure.
• Produce status reports and dashboards communicating security posture to technical and non-technical audiences.

Skills

Vulnerability Management

Incident Response

Cybersecurity

Risk Assessment

Stakeholder Communication

Tools

Tenable

Qualys

Rapid7

Wiz

Jira

Job description

RAPSYS Technologies PTE LTD in Singapore is seeking a detail-oriented Security Analyst to strengthen our information security program. You will own vulnerability management, risk assessment, and incident response coordination while aligning with NIST CSF and ISO 27001 controls.

You will collaborate with engineering, DevOps, and compliance teams to triage findings, drive remediation, and report on security posture to leadership.