{"id":3318762,"url":"https://alion.io/job/sedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops","title":"Cybersecurity Consultant (AppSec, VAPT & DevSecOps)","company":{"id":3802291,"name":"Sedha Consulting","domain":"sedhaconsulting.com","url":"https://alion.io/company/sedha-consulting","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":7500,"max":10500,"currency":"SGD","period":"month","gross":true,"usd_annual":98376},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"Fortify","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Waterfall","optional":false}],"status":"live","first_seen_at":"2026-10-27T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-27T00:00:00Z","board_verified":false,"closed_at":null,"days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"General Responsibilities:\nEmplaced in public agencies, you will collaborate with stakeholders and will be responsible for:\nEstablish Standards: Define and maintain the Ministry-wide framework for security testing (Vulnerability Assessment and Penetration Testing - VAPT).\nSOP Development: Create and roll out Standard Operating Procedures (SOPs) to guide Agency project teams on engaging external security vendors and managing internal testing cycles.\nQuality Assurance: Develop \"Quality Rubrics\" to help agencies evaluate the performance of pen-testers. You will conduct periodic sampling of testing reports and project involvements to ensure quality and rigour across the Ministry Family.\nSupport security tools such as CSPM, VMS, etc and follow up as part of remediation.\nAssisting in the development of agency-specific security requirements, reviewing and providing consultancy on the project-specific application and system security architecture to ensure that key security requirements are defined and designed into the systems, implemented in accordance to the security design, and in compliance with prevailing ICT security policies, standards, and guidelines.\nSecure Coding Standards: Establish Ministry-wide secure coding guidelines (e.g., based on OWASP, SANS) to ensure developers build security into the application layer from day one.\nSource Code Analysis: Lead the strategy for Static Application Security Testing (SAST) and Software Composition Analysis (SCA). You will evaluate tools that automate the detection of vulnerabilities in source code and third-party libraries.\nParticipating in scoping and facilitating of security assessments, reviews and audits, as well as reviewing their results, ensuring issues identified are adequately resolved and residual risks appropriately managed to ensure security assurance prior to commissioning.\nStaying updated on current and emerging security technologies for cloud platforms like AW, as well as tracking the evolving threat landscape, including threat actors and attack methodologies to support agencies’ gap analysis and threat management. \nPartnering with stakeholders, project teams, and outsourced vendors to ensure security objectives are achieved.\n[Qualifications, Skills and Mindset] \nGeneral Requirements: \nDegree in Computer Science, Computer or Electronics Engineering or Information Technology or related disciplines.\nMinimum 3 years of IT security experience in IT security operations, including management, deployment, and maintenance of security for ICT systems.\nDomain Expertise: Proven track record in conducting penetration tests for Web Applications, IT Systems (cloud environments), and complex Network architectures.\nAbility to effectively communicate cybersecurity risks, mitigation measures, and residual risks to stakeholders.\nKnowledge of cloud and on-premises security technologies, such as SIEM, Log Management and Analysis Tools, firewall, cryptography, vulnerability scanning tools, endpoint security, identity and access management, as well as frameworks like the MITRE ATT&CK framework, and security domains including data security, network security, cloud security, and application security.\nSource Code Analysis Tools: Proficiency with enterprise-grade SAST, DAST, SCA and VAPT tools (e.g., Checkmarx, Fortify, SonarQube, Snyk, Burp Suite).\nFamiliarity with application security tools for testing, such as vulnerability assessment, penetration testing (VA/PT), source code reviews, and static/dynamic application security tests, as well as concepts of waterfall and agile application development methodologies, and DevSecOps concepts.\nDay to day security operations support as L2.\nTeam player with good interpersonal skills.\nPossess good written, verbal, and presentation skills.\nPossess any of OSCP, SSCP, GDSA, Cloud Security, or related certifications would be advantageous.\nSkills\nSIEM, Security Operations, Electronics Engineering, Cyber Security, Cryptography, Cybersecurity Framework Application, Data Security, Information Technology, Computer Science, IT Security Operations, Endpoint Security, Deployment, Burp Suite, Agile & Waterfall Methodologies","description_format":"text","description_chars":4156,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Application Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-27T06:28:25Z"}],"visa":[],"liveness":{"score":83,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.878,"p_room":0.945,"age_days":5,"expected_fill_days":14,"reasons":["seen:5","velocity","win:mid"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":98376,"is_top_pay":false},"html_url":"https://alion.io/job/sedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops","json_url":"https://alion.io/job/sedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops.json","meta":{"generated_at":"2026-11-02T06:06:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8789,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3802291},"rest":"https://alion.io/mcp/rest/get_company?id=3802291"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsedha-consulting-cybersecurity-consultant-appsec-vapt-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3318762}},{"tool":"search_jobs","arguments":{"company":"sedhaconsulting.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3318762},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}