Triage Team Lead (Operations Support Engineer)

About the Role

We are looking for an experienced Triage Team Lead (Operations Support Engineer) to support the Government of Singapore's Crowdsourced Vulnerability Discovery Programme (CVDP) . You will lead a team responsible for validating, triaging, and managing cybersecurity vulnerability reports across government systems, ensuring high-quality and timely handling of security findings.

This role is ideal for cybersecurity professionals with strong hands-on penetration testing experience, leadership capabilities, and expertise in web application security.

Key Responsibilities

• Lead and manage a team of vulnerability triage specialists, ensuring quality, consistency, and timely processing of vulnerability reports.
• Oversee daily operations, workload planning, and resource allocation for the triage team.
• Perform hands-on validation and assessment of vulnerability reports during complex investigations or peak workload periods.
• Act as the technical escalation point for vulnerability validation, severity assessment, and remediation recommendations.
• Mentor and coach team members to maintain high standards in vulnerability analysis, documentation, and reporting.
• Develop and enhance triage processes, SOPs, workflows, and supporting tools.
• Create scripts and automation using Python or workflow tools to improve operational efficiency.
• Collaborate with government agencies, system owners, programme stakeholders, and external security researchers.
• Analyse vulnerability trends and prepare technical reports and presentations for management and stakeholders.
• Support additional cybersecurity programme initiatives as required.

Requirements

Mandatory Skills & Experience

• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Minimum 5 years of relevant cybersecurity experience.
• OSCP (Offensive Security Certified Professional) certification is mandatory.
• Hands-on experience identifying and validating web application vulnerabilities .
• Strong knowledge of OWASP Top 10 and common web security vulnerabilities.
• Experience performing vulnerability validation using Burp Suite and Kali Linux .
• Experience conducting vulnerability severity assessment, root cause analysis, and recommending remediation.
• Experience leading or mentoring technical cybersecurity teams.
• Strong written and verbal communication skills.
• Excellent analytical and problem-solving abilities.

Nice to Have

• Experience supporting Bug Bounty , Vulnerability Disclosure Programmes (VDP) , or Crowdsourced Vulnerability Discovery Programmes (CVDP) .
• Experience developing automation scripts using Python .
• Familiarity with workflow automation and integration platforms.
• Experience working with Government or public sector cybersecurity programmes.
• Experience presenting technical findings to senior stakeholders.

Technical Skills

• Web Application Security
• Vulnerability Assessment & Validation
• Penetration Testing
• OWASP Top 10
• Burp Suite
• Kali Linux
• Python Scripting
• Root Cause Analysis
• Vulnerability Severity Assessment
• Security Reporting
• Stakeholder Management
• Team Leadership