Senior Cyber Exposure Specialist

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future—connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Be a Part of Something BIG!

The Senior Cyber Exposure Specialist will be responsible for operating the organization’s enterprise-wide cyber exposure management strategy. This role is responsible for identifying, analysing, prioritising and reducing cybersecurity exposures across the organisation’s technology external and internal environment (e.g. on-premise, cloud, application, endpoint, network, appliances, and identity). The role extends beyond traditional vulnerability management by correlating vulnerabilities with asset criticality, attack-path exposure, threat intelligence, active exploit activity and existing security controls.

Make an Impact by

Remediation and Stakeholder Management

• Work with system owners, infrastructure teams, application teams and technology vendors to support timely remediation.
• Communicate vulnerability risks and remediation requirements clearly to both technical and non-technical stakeholders.
• Track vulnerability remediation against established service-level agreements and risk-based timelines.
• Escalate critical, overdue or repeatedly recurring vulnerabilities to the appropriate management and risk forums.
• Support exception and risk-acceptance processes when vulnerabilities cannot be remediated within the required timeframe.
• Assess proposed compensating controls and monitor approved risk exceptions until remediation or expiry.
• Conduct re-scans or other validation activities to confirm that vulnerabilities have been successfully remediated.
• Maintain accurate evidence and audit trails for vulnerability identification, assignment, remediation and closure.

Cyber Exposure Management

• Develop and continuously improve the organization’s cyber exposure management methodology, processes, standards and operating procedures.
• Maintain a consolidated view of vulnerabilities, misconfigurations, external attack-surface exposures, identity weaknesses and other exploitable security conditions.
• Correlate exposure information from vulnerability scanners, cloud security platforms, endpoint tools, application security testing, penetration tests, threat intelligence and attack-surface management platforms.
• Assess exposures across:

• i. On-premises infrastructure and data centres.
• ii. Public and private cloud environments.
• iii. Network and security devices.
• iv. Endpoints and servers.
• v. Applications, APIs and containers.
• vi. Identity and access-management platforms.
• vii. Internet-facing systems and third-party services.

• Identify unknown, unmanaged, unscanned or incorrectly classified assets through network discovery and asset-reconciliation activities.
• Monitor authenticated or credentialed scanning coverage and resolve scanning failures, access issues and data-quality gaps.
• Ensure scanning and assessment activities are conducted safely and do not adversely affect production services.

Vulnerability Analysis and Prioritization

• Review and analyse vulnerability findings to determine validity, severity, exploitability and potential business impact.
• Prioritise vulnerabilities using factors such as CVSS scores, known exploitation, threat intelligence, asset criticality, external exposure and compensating controls.
• Distinguish genuine security risks from false positives, duplicate findings and informational observations.
• Perform thematic and trending analysis to identify recurring vulnerabilities, common root causes, affected technologies and systemic control weaknesses.
• Analyse vulnerability patterns across business units, asset groups, technology platforms and remediation teams.
• Identify vulnerabilities that may indicate broader issues involving patching, configuration management, asset management or technology obsolescence.
• Monitor emerging vulnerabilities, actively exploited vulnerabilities and relevant vendor security advisories.
• Provide actionable recommendations for vulnerability remediation, mitigation or risk treatment.
• Participate in post-incident and lessons-learned reviews to improve exposure identification and response processes

Reporting and Continuous Improvement

• Produce operational and executive reports covering vulnerability exposure, remediation performance, overdue items and risk trends.
• Develop dashboards and metrics such as scan coverage, credentialed scan success, vulnerability ageing, remediation SLA compliance and recurrence rates.
• Present thematic and trend analysis to highlight systemic security weaknesses and improvement opportunities.
• Conduct root-cause analysis for recurring or widespread vulnerabilities.
• Recommend improvements to scanning coverage, prioritisation models, workflows, procedures and reporting.
• Support audits, regulatory reviews and security assessments by providing vulnerability management records and evidence.
• Maintain vulnerability management procedures, technical standards, operational guides and knowledge articles.
• Evaluate exposure-management technologies and support proofs of concept, product selection and implementation

Automation and Integration

• Design and maintain automated workflows for exposure ingestion, enrichment, prioritisation, ticket creation, escalation, validation and closure.
• Develop scripts using Python, PowerShell, JavaScript, Bash or similar languages.
• Integrate security platforms with ServiceNow and other enterprise ITSM, CMDB, SIEM and workflow platforms using REST APIs, JSON and webhooks.
• Automate the creation of vulnerability response items, incidents, security incidents, change requests and remediation tasks.
• Ensure automatically generated tickets contain relevant information defined by the organization’s vulnerability prioritize framework.
• Automate ticket assignment, reminders, escalations, rescan requests, status updates and closure following successful validation.
• Ensure appropriate audit trail, retry mechanisms, duplicate prevention, error handling and reconciliation controls.
• Monitor integration performance and promptly investigate failed or incomplete transactions.
• Maintain technical documentation, API mappings, integration diagrams and operational support procedures.

Skills for Success

• Degree in in Information Technology, Cybersecurity, Computer Science, Engineering or a related field.
• Minimally 5 years of proven experience managing zero day or critical and actively exploited vulnerabilities in complex enterprise environments.
• Demonstrated experience managing zero day or critical and actively exploited vulnerabilities in complex enterprise environments.
• Strong knowledge of cyber exposure management, vulnerability management and attack-surface management principles.
• Hands-on experience with enterprise platforms such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, Palo Alto Cortex Exposure Management or equivalent technologies.
• Strong understanding of authenticated scanning, network discovery, scan-policy configuration and vulnerability validation
• One or more Industry security Certifications such as CISSP, CCSP, CEH, Microsoft security, Cloud security or other equivalent industry certifications.
• Ability to articulate and drive remediation across various business units.

Good to have

• Working knowledge of threat intelligence, exploit techniques, indicators of compromise and attacker tactics.
• Strong data-analysis and reporting skills using SQL, Microsoft Excel, Power BI, Splunk or equivalent technologies
• Are you ready to say hello to BIG Possibilities?
• Join Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.
• Take the leap with Singtel to shape what’s next and accelerate your growth.