Triage Team Lead, Vulnerability Discovery Programme

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of GovTech, is looking for an experienced cybersecurity professional to lead its Crowdsourced Vulnerability Discovery Programme (CVDP) triage team. The role covers managing daily operations, leading a team of triage specialists and ensuring effective handling of vulnerability reports across government systems for the Government Bug Bounty Programme (GBBP), Vulnerability Disclosure Programme (VDP) and Vulnerability Rewards Programme (VRP) across Whole-of-Government systems.

Key responsibilities

• Lead a lean team of triage specialists, ensuring quality, efficiency and timely processing of vulnerability reports
• Manage team performance, workload and resource planning, and perform hands-on triage and validation when required, especially during peak periods or complex escalations
• Act as escalation point for complex vulnerability validation and severity rating decisions
• Mentor and train triage specialists on analysis, assessment and documentation standards
• Own and improve triage SOPs, workflows and tools, including integration and maintenance of key triage platforms
• Develop scripts and automation (e.g. Python, workflow tools) to streamline triage, reporting and platform integrations
• Liaise with government agencies, system owners and security researchers, and support the Programme Team in internal-external collaboration
• Analyse vulnerability trends, present notable findings and prepare reports for management and stakeholders
• Undertake additional responsibilities as required, and plan leave around scheduled GBBP and Pre-GBBP cycles

Required profile

• Degree in Cybersecurity, Computer Science or a related technical field
• OSCP certification
• Experience mentoring junior team members
• Bug bounty or government/regulated environment experience preferred
• Good command of English (oral and written)

Required skills

• Familiarity with web vulnerabilities (e.g. OWASP Top 10), severity rating, categorisation, root cause analysis and remediation
• Familiarity with Burp Suite and Kali Linux for vulnerability validation
• Strong analytical, problem-solving and communication skills, with collaborative leadership