Senior Cyber Exposure Specialist

About the role

Singtel is looking for a Senior Cyber Exposure Specialist to run its enterprise-wide cyber exposure management strategy. The role identifies, analyses, prioritises and reduces cybersecurity exposures across on-premise, cloud, application, endpoint, network, appliance and identity assets, going beyond traditional vulnerability management by linking vulnerabilities to asset criticality, attack-path exposure, threat intelligence and active exploits.

Key responsibilities

• Work with system owners, infrastructure and application teams and vendors to support timely remediation, track progress against SLAs and escalate critical or overdue vulnerabilities
• Develop and maintain the cyber exposure management methodology, processes and standards, and keep a consolidated view of vulnerabilities, misconfigurations and attack-surface exposures
• Correlate data from vulnerability scanners, cloud security platforms, endpoint tools, application security testing, penetration tests and threat intelligence, and identify unmanaged or unscanned assets
• Analyse vulnerability findings for validity, severity and business impact, distinguish false positives, perform thematic analysis and give remediation recommendations
• Produce operational and executive reports, dashboards and metrics, present trends and support audits and security assessments
• Design and maintain automated workflows for exposure ingestion, prioritisation, ticket creation, escalation and closure, integrating with ServiceNow, CMDB, SIEM and other platforms via REST APIs, JSON and webhooks
• Write automation scripts in Python, PowerShell, JavaScript or Bash and document integrations

Required profile

• Degree in Information Technology, Cybersecurity, Computer Science, Engineering or a related field
• At least 5 years of proven experience managing zero-day or critical, actively exploited vulnerabilities in complex enterprise environments
• Strong knowledge of cyber exposure, vulnerability and attack-surface management
• Hands-on experience with enterprise platforms such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management or Palo Alto Cortex Exposure Management
• Industry security certification such as CISSP, CCSP, CEH or equivalent
• Ability to drive remediation across business units; threat intelligence and data-analysis skills are a plus

Required skills

• Authenticated scanning, network discovery, scan-policy configuration and vulnerability validation
• Python, PowerShell, JavaScript, Bash and SQL
• REST APIs, JSON and webhooks