Application Security Remediation Services

Role: Application Security Remediation Services Exp: 6+yrs Location: Singapore Job Description: 1. Objective Provide dedicated engineering resources to identify, triage, remediate, validate, and report vulnerabilities identified through Penetration Testing, Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST) across Singapore critical applications. 2. Resource Assumptions Vendor shall provide 3–4 dedicated Engineers, including 1 Lead. Resources shall have expertise in secure coding, OWASP Top 10, SAST/DAST tooling, penetration testing remediation, Java/Angular/React technologies, API security, cloud security practices. 3. In-Scope Services Vulnerability triage, root-cause analysis, code remediation, dependency upgrades, SAST issue fixes, DAST issue fixes, penetration test observation remediation, false-positive validation, retesting coordination, security reporting, and secure coding recommendations. 4. Out-of-Scope Services Execution of independent penetration testing, procurement of security tools, infrastructure refresh projects, security operations monitoring, compliance audits, and features unrelated to security remediation. 5. Vulnerability Remediation Services Remediate vulnerabilities including Injection flaws, XSS, CSRF, SSRF, Broken Authentication, Broken Access Control, Security Misconfiguration, Sensitive Data Exposure, Insecure Dependencies, API Security issues, Secrets Exposure, and other findings identified through security assessments. 6. Governance Model Weekly remediation review meetings, monthly security governance reviews, leadership reporting, remediation backlog tracking, risk acceptance reviews, and quarterly continuous improvement assessments. 7. Commercial Deliverables Vulnerability remediation backlog, remediation design notes, secure coding recommendations, retest evidence, exception registers, monthly security dashboards, and executive governance reports. 8. Acceptance Criteria Vulnerabilities validated as fixed through rescans, penetration test retesting, or security team verification. Deliverables submitted on time, tracked in JIRA, and approved by application and security stakeholders. 9. Vendor Performance Metrics - Critical/High vulnerability closure rate, SLA compliance, vulnerability aging, rescans passed first time, reopened defect rate, reduction of recurring security findings, reporting quality, and stakeholder satisfaction.

• GRC Application Security Specialist (Contract)

  Monetary Authority of Singapore (MAS) · Singapore, Singapore

• Large Model Application Algorithm Research Scientist-International Content Security Algorithm Research-Soaring Star Talent Program

  ByteDance · Singapore

• Application Security Engineer

  Singapore