Vulnerability Management Specialist - VAPT & Remediation

Income; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Income Insurance seeks a skilled security professional to lead vulnerability management and VAPT processes. You will assess new advisories, coordinate third-party pentests, and triage vulnerability reports for remediation. You will also support DAST integration, log analysis, and ongoing risk assessment activities.

The role requires hands-on experience with Tenable, Burp Suite, and OWASP tools, plus strong communication to bridge technical and non-technical stakeholders.

Qualifications

• At least 2 years of experience in vulnerability management or vulnerability assessment, or a similar role.
• Experience with enterprise vulnerability management tools such as Tenable Vulnerability Management is preferred.
• Background in application development, web app technologies, and security testing or vulnerability assessment.
• Familiar with penetration testing methodologies and proficient in using testing tools.
• Familiar with common attack techniques, vulnerabilities and threats affecting networks and apps.
• Certifications such as CISSP, OSCP, or BSCP are preferred.
• Hands-on experience with enterprise vulnerability management tools.
• Knowledge of vulnerability scoring and prioritisation models (CVSS, EPSS, VPR).
• Knowledge of OWASP Top 10 and CTEM concepts.
• Basic programming or scripting skills in languages such as Python or PowerShell.

Responsibilities

• Perform vulnerability scanning and asset discovery, track remediation against SLAs, and verify fixes.
• Assess newly disclosed critical vulnerabilities and advisories to determine applicability and urgency.
• Coordinate pre-engagement, delivery and follow-up of external penetration tests.
• Review VAPT findings and address questions from affected teams.
• Support Bug Bounty by triaging reports, assessing severity, and coordinating fixes.
• Troubleshoot operational issues with vulnerability tools and coordinate with vendor support.
• Support CI/CD deployments to meet DAST standards and resolve scan issues.
• Monitor DAST scans and perform health checks.
• Administer vulnerability management tools and perform health checks, log extraction, and access reviews.
• Prepare weekly and monthly VAPT metrics and VA statistics for management meetings.
• Support risk assessments and recommend mitigations for non-remediable findings.
• Assist with process and procedure improvements as needed.

Skills

Vulnerability management

Threat assessment

CVSS/EPSS

Security compliance

Audit documentation

Cloud security basics

Strong communication

Tools

Tenable Vulnerability Management

Burp Suite

OWASP ZAP

Kali Linux

SoapUI

Postman

Python

PowerShell

Job description

Income Insurance seeks a skilled security professional to lead vulnerability management and VAPT processes. You will assess new advisories, coordinate third-party pentests, and triage vulnerability reports for remediation. You will also support DAST integration, log analysis, and ongoing risk assessment activities.

The role requires hands-on experience with Tenable, Burp Suite, and OWASP tools, plus strong communication to bridge technical and non-technical stakeholders.