- Singapore
U3 PROJECTS PTE. LTD. Hiring! Full Time Vulnerability Management Operations Analyst in , Earn up to SGD 10,000 - Ricebowl
Share
Save
Working Location
Job Description
Responsibilities
Job description: (In Detail):
Proven experience in vulnerability management within CI/CD or SSDLC environments
Hands-on experience with tools, such as OSS, SAST, Container Scanning, or similar
Proficiency in scripting languages (e.g. Python) for automation and data analysis
Strong understanding of secure coding practices and common vulnerability types (e.g. OWASP Top 10)
Experience in root cause analysis and remediation strategy development
Familiarity with threat modeling methodologies and tools
Excellent communication and stakeholder management skills
Responsibilities:
Manage end-to-end vulnerability lifecycle, including detection, triage, remediation tracking, and reporting.
Integrate and operationalize vulnerability scanning tools within CI/CD and SSDLC environments (e.g., SAST, DAST, secret scanning, container scanning).
Develop and maintain automation scripts (preferably in Python) to streamline vulnerability management workflows and reporting.
Analyze vulnerabilities to determine root causes and recommend effective mitigating controls.
Conduct threat modeling exercises to identify potential security risks from system architecture diagrams and design documents.
Collaborate with development, infrastructure, and risk teams to ensure timely remediation and risk reduction.
Communicate vulnerability findings clearly to stakeholders, articulating technical details and the business impact of mitigation strategies.
Support continuous improvement of vulnerability management processes, tools, and metrics.
Skillset:
Offensive security certifications (e.g. OSCP, CEH, GPEN) are highly desirable
Prior exposure to vulnerability management in large-scale enterprise environments
Experience with Cloud-native security and containerized application security
SKILLS: Vulnerability Management, CI/CD, SSDLC, OSS, SAST, Container Scanning, Python, OSCP, CEH, GPEN
Proven experience in vulnerability management within CI/CD or SSDLC environments
Hands-on experience with tools, such as OSS, SAST, Container Scanning, or similar
Proficiency in scripting languages (e.g. Python) for automation and data analysis
Strong understanding of secure coding practices and common vulnerability types (e.g. OWASP Top 10)
Experience in root cause analysis and remediation strategy development
Familiarity with threat modeling methodologies and tools
Excellent communication and stakeholder management skills
Responsibilities:
Manage end-to-end vulnerability lifecycle, including detection, triage, remediation tracking, and reporting.
Integrate and operationalize vulnerability scanning tools within CI/CD and SSDLC environments (e.g., SAST, DAST, secret scanning, container scanning).
Develop and maintain automation scripts (preferably in Python) to streamline vulnerability management workflows and reporting.
Analyze vulnerabilities to determine root causes and recommend effective mitigating controls.
Conduct threat modeling exercises to identify potential security risks from system architecture diagrams and design documents.
Collaborate with development, infrastructure, and risk teams to ensure timely remediation and risk reduction.
Communicate vulnerability findings clearly to stakeholders, articulating technical details and the business impact of mitigation strategies.
Support continuous improvement of vulnerability management processes, tools, and metrics.
Skillset:
Offensive security certifications (e.g. OSCP, CEH, GPEN) are highly desirable
Prior exposure to vulnerability management in large-scale enterprise environments
Experience with Cloud-native security and containerized application security
SKILLS: Vulnerability Management, CI/CD, SSDLC, OSS, SAST, Container Scanning, Python, OSCP, CEH, GPEN
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.
Learn More