Application Security Operations Lead, Technology Firm

Kerry Consulting

Fresher

Not Disclosed

Singapore

Posted 4 hours ago
Be among the first 10 applicants

Job Description

We are partnering with an established Technology Firm to appoint an Application Security Operations Lead. This is an opportunity for an experienced cybersecurity professional to lead a specialised team responsible for vulnerability triage and validation across complex enterprise environments. The role combines hands-on technical expertise, team leadership and operational excellence, with a strong emphasis on strengthening application security posture through effective vulnerability management.

Role

Reporting into the cybersecurity function, you will oversee a lean team of security specialists responsible for assessing, validating and prioritising vulnerability submissions from security researchers and vulnerability disclosure programmes. You will serve as the technical escalation point for complex findings, ensuring accurate severity assessments and actionable remediation recommendations. Beyond day-to-day operations, you will establish consistent triage standards, improve workflows and drive automation through scripting and platform integrations. You will also work closely with technical stakeholders, system owners and security researchers to facilitate vulnerability resolution, analyse emerging vulnerability trends and provide meaningful reporting to management.

Requirements

Degree in Cybersecurity, Computer Science or a related discipline, with an OSCP certification.
Strong technical understanding of web application vulnerabilities, OWASP Top 10, vulnerability validation, severity assessment and remediation practices.
Hands-on proficiency with offensive security tools such as Burp Suite and Kali Linux, with the ability to independently investigate and validate complex security findings.
Demonstrated experience in team leadership, mentoring and security operations, with the ability to manage operational priorities, improve processes and drive efficiency through scripting or automation.
Excellent analytical, communication and stakeholder management skills. Prior exposure to bug bounty programmes, vulnerability disclosure programmes or regulated environments would be advantageous.

To Apply

Interested candidates, please submit your resume to Grace Lim at [Confidential Information]. We regret to inform that only successful shortlisted candidates will be notified.

License No: 16S8060 Registration no: R1988923