Vulnerability Assessments Analyst

7 days ago


Singapore Citi Full time

**The Role**:
**Responsibilities**:

- Support Citi’s Red, Blue, and Purple Teams during the execution of offensive security assessment operations
- Participate in advanced exploitation operations against a large global enterprise, including Red and Purple Team operations
- Identify opportunities to automate and standardize information security controls and for the supported groups
- Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
- Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
- Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
- Assist the development and delivery of secure solutions by coordinating with business and technical contacts
- Assist in assessing risk when making business decisions

**Qualifications**:
2+ years’ experience or equivalent knowledge and exposure are required with most of the following:

- Assisting in attack surface management
- Leveraging the MITRE ATT&CK Framework
- Helping to conduct Adversary Emulations or Assumed Breach Exercises
- Familiarity with industry Adversary Emulation Frameworks like PTES, CBEST, iCAST, GFMA
- Knowledge of tools and processes used to expose known and undocumented vulnerabilities in various different systems
- Assisting with Purple Team Testing
- Participation in Cyber Tiger Team operations
- Identifying, researching, validating, and exploiting various different, known, and unknown security vulnerabilities on the server and client side
- Red Team testing tools: Cobalt Strike, Red Team Toolkit, etc.
- Vulnerability Assessment tools: Nessus, Qualys, etc.
- Exploitation frameworks: Metasploit, CANVAS, Core Impact
- An understanding of OSI model
- Security devices: Firewalls, VPN, AAA systems
- OS Security: Unix/Linux, Windows, OSX
- Understanding of common protocols: HTTP, LDAP, SMTP, DNS
- Web development and programming languages: Python, Perl, Ruby, Java,.Net
- Reporting information security vulnerabilities to the business

**Education**:

- Bachelor’s degree/University degree or equivalent experience
- Industry-accredited security certifications highly preferred but not required (e.g. PNPT, OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, GCFA, or CISSP)

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
- **Job Family Group**:
Technology
- **Job Family**:
Information Security
- **Time Type**:
Full time
- Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

View the "**EEO is the Law**" poster. View the **EEO is the Law Supplement**.

View the **EEO Policy Statement**.

View the **Pay Transparency Posting



  • Singapore SEDHA CONSULTING PTE. LTD. Full time

    **Vulnerability Assessment Analysts** **Job Scope**: - Perform scans and audits of systems to identify and categorize vulnerabilities. - Utilize various tools and software to systematically evaluate the security posture of IT infrastructures. - Analyse vulnerability reports and prioritize findings based on risk. **Qualifications**: - Strong understanding...


  • Singapore FORTIEDGE PTE. LTD. Full time

    We are looking for a talented individual to fill the position of Vulnerability Assessment Analyst at FORTIEDGE PTE. LTD. As a member of our team, you will be responsible for conducting penetration testing and vulnerability assessment using proven methodologies.Job Requirements:Conduct web application penetration testing, mobile application penetration...


  • Singapore Citi Full time

    **Qualifications**: Pre-requisites for this position are at least a bachelor's degree with 3 - 7 years of experience on most of the following: - Identifying, researching, validating, and exploiting various different known and unknown security vulnerabilities on server and client side - Vulnerability Assessment tools, e.g. Nessus, Qualys, etc. - Deep...


  • Singapore Citi Full time

    **Description** **Qualifications** - Pre-requisites for this position are at least a Bachelor's Degree with 3 - 7 years of experience on most of the following: - Identifying, researching, validating, and exploiting various different known and unknown security vulnerabilities on server and client side - Vulnerability Assessment tools, e.g. Nessus, Qualys,...


  • Singapore MANPOWER STAFFING SERVICES (SINGAPORE) PTE LTD Full time

    Roles & ResponsibilitiesVulnerability Research AnalystResponsibilities:Research and analyze newly published security vulnerabilities to assess their severity and potential impact on the organization's systems and infrastructure. Conduct proof of concept testing for identified vulnerabilities to validate their existence and understand their exploitation...


  • Singapore TikTok Full time

    Responsibilities TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices, including Los Angeles, New York, London, Paris, Berlin, Dubai, Mumbai, Singapore, Jakarta, Seoul, and Tokyo. Why Join Us At TikTok, our people are humble, intelligent, compassionate and creative. We...


  • Singapore Citi Full time

    The primary focus of this role is to coordinate vulnerability assessment engagements with our stake holders and liaise with our Internal and external partners. This role requires someone with strong technical, organizational, and management skills to maintain an active presence throughout the lifecycle of a vulnerability assessment...


  • Singapore Bank of America Full time

    At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates...


  • Singapore DACTA SG PTE. LTD. Full time

    Join our team at DACTA SG PTE. LTD. as a Cybersecurity Entry-Level Professional! In this role, you will receive hands-on training to develop into an independent penetration tester.About the JobAs a Junior Penetration Tester, you will be responsible for assisting in conducting end-to-end vulnerability assessments and penetration testing on various systems,...

  • Vulnerability Analyst

    23 hours ago


    Singapore Continental Full time

    **Company Description** Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2022, Continental generated sales of €39.4 billion and...

  • Senior Threat

    5 days ago


    Singapore ALLEN & OVERY LLP Full time

    **It’s Time** Allen & Overy is a leading global law firm operating in over thirty countries. By turning our insight, technology and talent into ground-breaking solutions, we’ve earned a place at the forefront of our industry. Our lawyers are leaders in their field - and the same goes for our support teams. Ambitious, driven and open to fresh...

  • Vulnerability Analyst

    23 hours ago


    Singapore Continental Full time

    Your tasks **Responsibilities**: - Work with scanning tools to identify vulnerabilities - Manually verify and identify vulnerabilities - Prioritize vulnerabilities - Continuously improve the automation process - Support asset owners in understanding vulnerabilities and selecting appropriate remediation measures - Track vulnerability remediation - Stay up...


  • Singapore Citi Full time

    Job Description:Citi is seeking a highly skilled Cybersecurity Vulnerability Assessment Expert to join our team. In this role, you will participate in Adversary Emulation programs by emulating cyber and criminal threat actors targeting Citi.Key Responsibilities:Support Citi's Red, Blue, and Purple Teams during offensive security assessment operationsPresent...


  • Singapore KNOVEL ENGINEERING PTE. LTD. Full time

    About KNOVEL ENGINEERING PTE. LTD.KNOVEL ENGINEERING PTE. LTD. is a leading provider of cybersecurity solutions. Our goal is to deliver innovative solutions that help our clients stay ahead of the curve in terms of security threats and best practices.Job SummaryWe are seeking an IT Vulnerability Consultant to join our team. The successful candidate will be...


  • Singapore TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD. Full time

    About Us:">TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD is a leading provider of software systems testing services. We are committed to delivering high-quality solutions that meet the evolving needs of our clients.Key Responsibilities:Support sales efforts by attending security meetings and providing project timelinesDevelop security acceptance test...


  • Singapore TikTok Full time

    Responsibilities TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices, including Los Angeles, New York, London, Paris, Berlin, Dubai, Mumbai, Singapore, Jakarta, Seoul, and Tokyo. Why Join Us At TikTok, our people are humble, intelligent, compassionate and creative. We...


  • Singapore SEARCH STAFFING SERVICES PTE. LTD. Full time

    We are currently working with a German MNC client; looking for a Vulnerability Researcher with cybersecurity work experience to join them. **Vulnerability Researcher **Responsibilities**: - Identify and analyze security weaknesses and flaws in software, hardware, or systems - Analyzing code, protocols, and configurations for security issues - Penetration...


  • Singapore LANTU EMPLOYMENT AGENCY PTE. LTD. Full time

    Key Responsibilities:Perform in-depth penetration tests on a wide range of environments, including networks, web applications, mobile applications, and cloud infrastructure.Identify and exploit vulnerabilities, and provide actionable remediation recommendations.Develop and execute custom test cases, scenarios, and scripts to simulate attack vectors.Create...


  • Singapore Singapore Technologies Engineering Ltd Full time

    Job ID: 14301- Location: ST Engineering Jurong East Bui, SG- Description: - **Responsibilities**: - Perform source code review - Perform security analysis on the vulnerabilities - Prepare comprehensive reports with document findings - Deliver presentations to customers - Keep abreast of new developments, emerging threats and vulnerabilities in...

  • Penetration Tester

    4 days ago


    Singapore TRUST RECRUIT PTE. LTD. Full time

    **Highlights**: - **Homeland Security Domain Provider**: - **Permanent job opportunity**: - **5 days work week**: - **Great remuneration and benefits** **Responsibilities**: - Lead and mentor junior Penetration Testers - Perform presales works, which includes but not limited to liaising with external customers and internal teams to prepare proposals...