{"id":3131225,"url":"https://alion.io/job/fpt-software-cybersecurity-analyst-application-security","title":"Cybersecurity Analyst (Application Security)","company":{"id":49426,"name":"FPT Software","domain":"fptsoftware.com","url":"https://alion.io/company/fpt-software","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Join","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":5000,"max":6000,"currency":"SGD","period":"month","gross":true,"usd_annual":56352},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-23T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-23T00:00:00Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"Role Overview\nWe are seeking a Cybersecurity Analyst specialising in Application Security to assess, identify, and manage security vulnerabilities across enterprise applications and development projects.\nThe successful candidate will work closely with development, DevOps, and security teams to evaluate application security risks, review vulnerability findings, recommend remediation measures, and support the implementation of security controls throughout the Software Development Life Cycle (SDLC).\nKey Responsibilities\nApplication Security & Vulnerability Management\nConduct application security reviews and assessments across applications and development projects.\nReview and analyse security findings from Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST) tools.\nAssess application and dependency vulnerabilities based on exploitability, business impact, application context, and reachable code paths.\nIdentify false positives, non-applicable vulnerabilities, and potential security risks.\nCollaborate with development and DevOps teams to recommend remediation and mitigation measures.\nTrack security vulnerabilities and remediation activities through to closure.\nSecurity Risk Assessment & Governance\nReview security waiver and risk acceptance requests, including supporting justifications, compensating controls, and residual risks.\nConduct or support application and cloud security risk assessments for new systems, application enhancements, APIs, and technology implementations.\nEvaluate security risks and provide recommendations aligned with organisational security policies and industry best practices.\nSupport vulnerability triage and security incident investigations when required.\nDevSecOps & Security Integration\nSupport the integration and operation of application security controls within DevOps and CI/CD pipelines.\nImplement and maintain security scanning processes, automated security checks, and security gates.\nPromote secure coding practices and security awareness among development teams.\nSupport continuous improvement of Secure SDLC and DevSecOps processes.\nRequirements & Qualifications\nEducation & Experience\nDegree or Diploma in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.\nApproximately 3–5 years of relevant experience in Cybersecurity, Application Security, Vulnerability Management, or DevSecOps.\nHands-on experience analysing application security vulnerabilities and collaborating with development teams on remediation.\nExperience supporting security risk assessments, security waivers, and risk acceptance processes.\nTechnical Skills\nPractical experience with SAST, SCA, DAST, and vulnerability management tools.\nStrong understanding of OWASP Top 10, web application security, API security, and common application vulnerabilities.\nAbility to assess vulnerabilities beyond CVSS severity, considering exploitability, application context, and reachable code paths.\nGood understanding of Secure SDLC, DevSecOps, CI/CD security controls, and software dependency management.\nKnowledge of cloud security fundamentals, preferably AWS.\nFamiliarity with application security scanning, vulnerability triage, and remediation processes.\nPreferred Skills & Certifications\nExposure to Cloud-Native Application Protection Platforms (CNAPP), Cloud Security Posture Management (CSPM), SIEM, or other cybersecurity platforms.\nExperience supporting security incident investigations or vulnerability triage.\nRelevant cybersecurity certifications such as CSSLP, CISSP, CCSP, GIAC application security certifications, or equivalent.\nSkills\nSecurity Risk, Security Assessments, Security Governance, OWASP, Application Security, Technical Skills, DevOps, Computer Science, Cybersecurity Engineering, Security Risk Analysis, Education, API Security, Vulnerability Assessment, Security Test, Security Monitoring, Threat and Vulnerability Management","description_format":"text","description_chars":3987,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Application Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-23T02:28:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":30,"reasons":["seen:3","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":56352,"is_top_pay":false},"html_url":"https://alion.io/job/fpt-software-cybersecurity-analyst-application-security","json_url":"https://alion.io/job/fpt-software-cybersecurity-analyst-application-security.json","meta":{"generated_at":"2026-10-26T07:13:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9603,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49426},"rest":"https://alion.io/mcp/rest/get_company?id=49426"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffpt-software-cybersecurity-analyst-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffpt-software-cybersecurity-analyst-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffpt-software-cybersecurity-analyst-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fpt-software-cybersecurity-analyst-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffpt-software-cybersecurity-analyst-application-security"}]}