About the Role
We are looking for an experienced Triage Team Lead (Operations Support Engineer) to support the Government of Singapore's Crowdsourced Vulnerability Discovery Programme (CVDP). You will lead a team responsible for validating, triaging, and managing cybersecurity vulnerability reports across government systems, ensuring high-quality and timely handling of security findings.
This role is ideal for cybersecurity professionals with strong hands-on penetration testing experience, leadership capabilities, and expertise in web application security.
Key Responsibilities
- Lead and manage a team of vulnerability triage specialists, ensuring quality, consistency, and timely processing of vulnerability reports.
- Oversee daily operations, workload planning, and resource allocation for the triage team.
- Perform hands-on validation and assessment of vulnerability reports during complex investigations or peak workload periods.
- Act as the technical escalation point for vulnerability validation, severity assessment, and remediation recommendations.
- Mentor and coach team members to maintain high standards in vulnerability analysis, documentation, and reporting.
- Develop and enhance triage processes, SOPs, workflows, and supporting tools.
- Create scripts and automation using Python or workflow tools to improve operational efficiency.
- Collaborate with government agencies, system owners, programme stakeholders, and external security researchers.
- Analyse vulnerability trends and prepare technical reports and presentations for management and stakeholders.
- Support additional cybersecurity programme initiatives as required.
Requirements
Mandatory Skills & Experience
- Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
- Minimum 5 years of relevant cybersecurity experience.
- OSCP (Offensive Security Certified Professional) certification is mandatory.
- Hands-on experience identifying and validating web application vulnerabilities.
- Strong knowledge of OWASP Top 10 and common web security vulnerabilities.
- Experience performing vulnerability validation using Burp Suite and Kali Linux.
- Experience conducting vulnerability severity assessment, root cause analysis, and recommending remediation.
- Experience leading or mentoring technical cybersecurity teams.
- Strong written and verbal communication skills.
- Excellent analytical and problem-solving abilities.
Nice to Have
- Experience supporting Bug Bounty, Vulnerability Disclosure Programmes (VDP), or Crowdsourced Vulnerability Discovery Programmes (CVDP).
- Experience developing automation scripts using Python.
- Familiarity with workflow automation and integration platforms.
- Experience working with Government or public sector cybersecurity programmes.
- Experience presenting technical findings to senior stakeholders.
Technical Skills
- Web Application Security
- Vulnerability Assessment & Validation
- Penetration Testing
- OWASP Top 10
- Burp Suite
- Kali Linux
- Python Scripting
- Root Cause Analysis
- Vulnerability Severity Assessment
- Security Reporting
- Stakeholder Management
- Team Leadership
