Vulnerability Assessments Analyst

3 days ago

Singapore Citi Full time

**The Role**: **Responsibilities**: - Support Citi’s Red, Blue, and Purple Teams during the execution of offensive security assessment operations - Participate in advanced exploitation operations against a large global enterprise, including Red and Purple Team operations - Identify opportunities to automate and standardize information security controls and for the supported groups - Analyze source code to mitigate identified weaknesses and vulnerabilities within the system - Review and validate automated testing results and prioritize actions that resolve issues based on overall risk - Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions - Assist the development and delivery of secure solutions by coordinating with business and technical contacts - Assist in assessing risk when making business decisions **Qualifications**: 2+ years’ experience or equivalent knowledge and exposure are required with most of the following: - Assisting in attack surface management - Leveraging the MITRE ATT&CK Framework - Helping to conduct Adversary Emulations or Assumed Breach Exercises - Familiarity with industry Adversary Emulation Frameworks like PTES, CBEST, iCAST, GFMA - Knowledge of tools and processes used to expose known and undocumented vulnerabilities in various different systems - Assisting with Purple Team Testing - Participation in Cyber Tiger Team operations - Identifying, researching, validating, and exploiting various different, known, and unknown security vulnerabilities on the server and client side - Red Team testing tools: Cobalt Strike, Red Team Toolkit, etc. - Vulnerability Assessment tools: Nessus, Qualys, etc. - Exploitation frameworks: Metasploit, CANVAS, Core Impact - An understanding of OSI model - Security devices: Firewalls, VPN, AAA systems - OS Security: Unix/Linux, Windows, OSX - Understanding of common protocols: HTTP, LDAP, SMTP, DNS - Web development and programming languages: Python, Perl, Ruby, Java,.Net - Reporting information security vulnerabilities to the business **Education**: - Bachelor’s degree/University degree or equivalent experience - Industry-accredited security certifications highly preferred but not required (e.g. PNPT, OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, GCFA, or CISSP) This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required. - **Job Family Group**: Technology - **Job Family**: Information Security - **Time Type**: Full time - Citi is an equal opportunity and affirmative action employer. Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. View the "**EEO is the Law**" poster. View the **EEO is the Law Supplement**. View the **EEO Policy Statement**. View the **Pay Transparency Posting

  • Vulnerability Assessment Analysts

    5 days ago

    Singapore SEDHA CONSULTING PTE. LTD. Full time

    **Vulnerability Assessment Analysts** **Job Scope**: - Perform scans and audits of systems to identify and categorize vulnerabilities. - Utilize various tools and software to systematically evaluate the security posture of IT infrastructures. - Analyse vulnerability reports and prioritize findings based on risk. **Qualifications**: - Strong understanding...

  • Infrastructure Vulnerability Assessment Analyst

    2 weeks ago

    Singapore Citi Full time

    Excited to grow your career? We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply! Our people make all the difference in our success. **Description** Duties will...

  • Infrastructure Vulnerability Assessment Analyst

    5 days ago

    Singapore Citi Full time

    **Qualifications**: Pre-requisites for this position are at least a bachelor's degree with 3 - 7 years of experience on most of the following: - Identifying, researching, validating, and exploiting various different known and unknown security vulnerabilities on server and client side - Vulnerability Assessment tools, e.g. Nessus, Qualys, etc. - Deep...

  • Director, Security Assessment and Vulnerability

    2 weeks ago

    Singapore SINGAPORE TELECOMMUNICATIONS LIMITED Full time

    **Responsibilities**: - Enhance the Group’s vulnerability management programmes to identify, assess, and remediate security vulnerabilities. - Collaborate with cross-functional teams to assess vulnerability risks and prioritize remediation efforts. - Establish and maintain a vulnerability tracking system to monitor and report on the status...

  • Officer-vulnerability Assessment Analyst-c11-hybrid

    24 hours ago

    Singapore Citi Full time

    The primary focus of this role is to coordinate vulnerability assessment engagements with our stake holders and liaise with our Internal and external partners. This role requires someone with strong technical, organizational, and management skills to maintain an active presence throughout the lifecycle of a vulnerability assessment engagement....

  • Senior Threat

    23 hours ago

    Singapore ALLEN & OVERY LLP Full time

    **It’s Time** Allen & Overy is a leading global law firm operating in over thirty countries. By turning our insight, technology and talent into ground-breaking solutions, we’ve earned a place at the forefront of our industry. Our lawyers are leaders in their field - and the same goes for our support teams. Ambitious, driven and open to fresh...

  • Vulnerability Assessments Analyst

    2 weeks ago

    Singapore Citi Full time

    **Vulnerability Assessments Analyst - Red Team, AVP (C12)** **The Role**: In addition, this role will expose the DevOps analyst to complex Red Team operations in a fast-paced environment where the ability to perform under pressure is key to success. **Responsibilities** - Support existing Red Team lab infrastructure, and build out new requirements to align...

  • Assistant Manager/Deputy Manager/Manager

    2 days ago

    Singapore Security Vulnerability Management Full time $120,000 - $180,000 per year

    You will be responsible for overseeing the enterprise-wide vulnerability management lifecycle, including identifying, assessing, prioritizing, and driving the remediation of security vulnerabilities across systems, applications, and infrastructure to reduce cyber risk exposure. This role requires strong technical skills, cross-functional coordination, and...

  • Senior/Vulnerability Analyst

    2 days ago

    Singapore Income Insurance Limited Full time $80,000 - $120,000 per year

    DescriptionResponsibilities:Perform vulnerability scanning/discovery, tracking of remediation SLA and follow up on closure of findingsSupport private bug bounty and public vulnerability disclosure program by performing triaging and follow up on reports receivedCoordinate with external vendors on penetration testing programConduct meetings to communicate the...

  • Vulnerability Assessment and Penetration Testing

    5 days ago

    Singapore Singapore Technologies Engineering Ltd Full time

    Job ID: 14301- Location: ST Engineering Jurong East Bui, SG- Description: - **Responsibilities**: - Perform source code review - Perform security analysis on the vulnerabilities - Prepare comprehensive reports with document findings - Deliver presentations to customers - Keep abreast of new developments, emerging threats and vulnerabilities in...