全职 Security Analyst 工作, 薪水 up to SGD 9,500, ELION SOLUTIONS PTE. LTD. 公司招聘中 - Ricebowl

WE are looking for a Vulnerability Management Analyst supports the AWPT program by triaging vulnerabilities, validating remediation, coordinating stakeholders, and managing the vulnerability lifecycle to ensure timely closure of security findings from AI-powered penetration testing tools.

Responsibilities

Review and triage findings from AI-based penetration testing tools to assess exploitability, severity, technical impact, and business risk

Identify false positives and duplicate vulnerabilities to improve accuracy of vulnerability data

Recommend severity adjustments and risk acceptance decisions based on thorough risk assessment

Coordinate with application teams to develop and validate remediation plans

Review code changes, logs, and supporting evidence to confirm remediation effectiveness

Retest vulnerabilities and validate fixes to ensure successful remediation before closure

Enhance Jira-based triage workflows and automation to streamline vulnerability management processes

Develop dashboards and lifecycle tracking reports to monitor vulnerability status and trends

Improve vulnerability correlation and tracking capabilities for comprehensive risk visibility

Support integration efforts with AI-powered testing platforms to optimize security assessments

Manage vulnerability lifecycle tracking through Jira to ensure timely issue resolution

Coordinate stakeholders and facilitate resolution of vulnerability-related issues across teams

Escalate critical or overdue vulnerabilities to appropriate leadership for prompt action

Produce governance metrics and executive reports to inform decision-making and compliance

Required competencies and certifications

Vulnerability Management and Risk Assessment

Penetration Testing concepts and OWASP Top 10 knowledge

Jira workflow management and reporting skills

Application Security and Secure Coding principles

Security analytics and dashboard development

Strong communication and stakeholder management skills

Preferred competencies and qualifications

CEH, GWAPT, OSCP, CISSP, or equivalent certifications

Experience in vulnerability governance for large enterprises

Knowledge of AI-assisted security testing platforms