Vulnerability Assessments Analyst

3 days ago

Singapore Citi Full time

**The Role**:
**Responsibilities**:

- Support Citi’s Red, Blue, and Purple Teams during the execution of offensive security assessment operations
- Participate in advanced exploitation operations against a large global enterprise, including Red and Purple Team operations
- Identify opportunities to automate and standardize information security controls and for the supported groups
- Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
- Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
- Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
- Assist the development and delivery of secure solutions by coordinating with business and technical contacts
- Assist in assessing risk when making business decisions

**Qualifications**:
2+ years’ experience or equivalent knowledge and exposure are required with most of the following:

- Assisting in attack surface management
- Leveraging the MITRE ATT&CK Framework
- Helping to conduct Adversary Emulations or Assumed Breach Exercises
- Familiarity with industry Adversary Emulation Frameworks like PTES, CBEST, iCAST, GFMA
- Knowledge of tools and processes used to expose known and undocumented vulnerabilities in various different systems
- Assisting with Purple Team Testing
- Participation in Cyber Tiger Team operations
- Identifying, researching, validating, and exploiting various different, known, and unknown security vulnerabilities on the server and client side
- Red Team testing tools: Cobalt Strike, Red Team Toolkit, etc.
- Vulnerability Assessment tools: Nessus, Qualys, etc.
- Exploitation frameworks: Metasploit, CANVAS, Core Impact
- An understanding of OSI model
- Security devices: Firewalls, VPN, AAA systems
- OS Security: Unix/Linux, Windows, OSX
- Understanding of common protocols: HTTP, LDAP, SMTP, DNS
- Web development and programming languages: Python, Perl, Ruby, Java,.Net
- Reporting information security vulnerabilities to the business

**Education**:

- Bachelor’s degree/University degree or equivalent experience
- Industry-accredited security certifications highly preferred but not required (e.g. PNPT, OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, GCFA, or CISSP)

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
- **Job Family Group**:
Technology
- **Job Family**:
Information Security
- **Time Type**:
Full time
- Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

View the "**EEO is the Law**" poster. View the **EEO is the Law Supplement**.

View the **EEO Policy Statement**.

View the **Pay Transparency Posting

  • Vulnerability Assessment Analysts

    4 days ago

    Singapore SEDHA CONSULTING PTE. LTD. Full time

    **Vulnerability Assessment Analysts** **Job Scope**: - Perform scans and audits of systems to identify and categorize vulnerabilities. - Utilize various tools and software to systematically evaluate the security posture of IT infrastructures. - Analyse vulnerability reports and prioritize findings based on risk. **Qualifications**: - Strong understanding...

  • Infrastructure Vulnerability Assessment Analyst

    2 weeks ago

    Singapore Citi Full time

    Excited to grow your career? We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply! Our people make all the difference in our success. **Description** Duties will...

  • Infrastructure Vulnerability Assessment Analyst

    4 days ago

    Singapore Citi Full time

    **Qualifications**: Pre-requisites for this position are at least a bachelor's degree with 3 - 7 years of experience on most of the following: - Identifying, researching, validating, and exploiting various different known and unknown security vulnerabilities on server and client side - Vulnerability Assessment tools, e.g. Nessus, Qualys, etc. - Deep...

  • Director, Security Assessment and Vulnerability

    2 weeks ago

    Singapore SINGAPORE TELECOMMUNICATIONS LIMITED Full time

    **Responsibilities**: - Enhance the Group’s vulnerability management programmes to identify, assess, and remediate security vulnerabilities. - Collaborate with cross-functional teams to assess vulnerability risks and prioritize remediation efforts. - Establish and maintain a vulnerability tracking system to monitor and report on the status...

  • Avp - Vulnerability Assessment Analyst (Hybrid)

    1 week ago

    Singapore Citi Full time

    The primary focus of this role is to coordinate vulnerability assessment engagements with our stake holders and liaise with our Internal and external partners. This role requires someone with strong technical, organizational, and management skills to maintain an active presence throughout the lifecycle of a vulnerability assessment...

  • Vulnerability Assessment Professional

    5 days ago

    Singapore beBeeSecurity Full time $150,000 - $250,000

    Penetration Testing SpecialistJob Description:We are seeking a highly skilled Penetration Testing Specialist to join our team. As a key member of our security team, you will be responsible for conducting thorough vulnerability assessments and penetration testing across diverse environments.You will also perform source code reviews to identify potential...

  • Senior/Vulnerability Analyst

    2 weeks ago

    Singapore INCOME INSURANCE LIMITED Full time

    Roles & ResponsibilitiesThe vulnerability analyst will be responsible for performing vulnerability discovery on our internal and external IT infrastructure, web, mobile and web service applications, leveraging both automated tools and manual techniques, and liaising with systems & applications owners on follow up actions.Key ResponsibilitiesPerform...

  • Senior/Vulnerability Analyst

    1 week ago

    Singapore INCOME INSURANCE LIMITED Full time

    Roles & Responsibilities The vulnerability analyst will be responsible for performing vulnerability discovery on our internal and external IT infrastructure, web, mobile and web service applications, leveraging both automated tools and manual techniques, and liaising with systems & applications owners on follow up actions. Key Responsibilities Perform...

  • Cybersecurity Specialist

    6 days ago

    Singapore beBeeCybersecurity Full time $50,000 - $70,000

    Job Title: Cybersecurity Specialist - Vulnerability AssessmentWe are seeking a detail-oriented and motivated cybersecurity specialist to join our team. In this role, you will be responsible for conducting thorough vulnerability assessments on systems, networks, and applications.Key Responsibilities:Perform in-depth security assessments to identify...

  • Vulnerability Analyst, IT Cybersecurity

    2 weeks ago

    Singapore SEARCH STAFFING SERVICES PTE. LTD. Full time

    We are currently working with a German MNC client; looking for a Vulnerability Analyst, IT with cybersecurity work experience to join them. **Vulnerability Analyst, IT **Responsibilities**: - As part of the vulnerability management team you will help to identify, prioritize, and track findings - Work closely with many different departments in order to...