Job Description – Senior Security Consultant (OSS Vulnerability Triage & Risk Calibration)
Location- Singapore or APAC
Position Title:
Senior Security Consultant – Open Source Vulnerability Research & Triage
Experience:
- 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
- Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.
Key Responsibilities
Vulnerability Analysis & Validation
- Analyze and investigate security findings generated by automated vulnerability scanners.
- Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
- Perform root cause analysis of identified vulnerabilities.
- Validate exploitability and business impact of reported issues.
Threat Modeling & Security Assessment
- Develop project-level threat models for OSS repositories.
- Identify attack surfaces, trust boundaries, and security risks.
- Evaluate security implications within the broader application ecosystem.
- Apply risk-based security evaluation methodologies.
- Document triage decisions and vulnerability classifications.
- Contribute to the creation of golden datasets for AI model training and benchmarking.
- Provide feedback to improve automated vulnerability detection systems.
Required Technical Skills
Strong code review and debugging capabilities in:
Additional scripting capability in Bash or equivalent preferred.
