Lead, Cyber Exposure Specialist

About the role

Singtel is looking for a Lead, Cyber Exposure Specialist to develop and operate the enterprise-wide cyber exposure management strategy. The role identifies, analyses, prioritises and reduces cybersecurity exposures across on-premise, cloud, application, endpoint, network, appliance and identity assets, going beyond traditional vulnerability management by correlating vulnerabilities with asset criticality, attack-path exposure, threat intelligence and active exploit activity.

Key responsibilities

• Work with system owners, infrastructure and application teams and vendors to support timely remediation, track progress against SLAs and escalate critical or overdue vulnerabilities
• Develop and maintain the cyber exposure management methodology, processes and standards, and keep a consolidated view of vulnerabilities, misconfigurations and attack-surface exposures
• Analyse vulnerability findings, prioritise them using CVSS, threat intelligence and asset criticality, and distinguish real risks from false positives
• Produce operational and executive reports, dashboards and metrics, and present trend analysis to leadership
• Design and maintain automated workflows and scripts (Python, PowerShell, etc.) and integrate security platforms with ServiceNow, ITSM, CMDB and SIEM via REST APIs, JSON and webhooks
• Assess cloud security posture, including misconfigurations, excessive permissions and identity risks, and define cloud security policies aligned with CIS Benchmarks, NIST CSF and the CSA Cloud Controls Matrix
• Evaluate AI-assisted capabilities for exposure analysis and threat correlation, validating outputs and protecting sensitive data

Required profile

• Degree in Information Technology, Cybersecurity, Computer Science, Engineering or a related field
• At least 6 years of proven experience managing zero-day or critical, actively exploited vulnerabilities in complex enterprise environments
• Strong knowledge of cyber exposure, vulnerability and attack-surface management
• Hands-on experience with platforms such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, Palo Alto Cortex Exposure Management or Checkpoint
• Experience with CSPM or CNAPP solutions such as Microsoft Defender for Cloud, Palo Alto Prisma or Wiz
• One or more industry security certifications such as CISSP, CCSP, CEH or Microsoft security certifications

Required skills

• Authenticated scanning, network discovery, scan-policy configuration and vulnerability validation
• Scripting (Python, PowerShell, JavaScript, Bash) and API integration
• Good to have: threat intelligence, SQL, Power BI, Splunk, SIEM, EDR, NDR, IDS/IPS, WAF and SOC knowledge