Triage Team Lead, Vulnerability Discovery Programme

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are seeking an experienced cybersecurity professional to lead our Crowdsourced Vulnerability Discovery Programme (CVDP) triage team. This role encompasses managing daily operations, leading a team of triage specialist, and ensuring effective handling of vulnerability reports across government systems for the Government Bug Bounty Programme (GBBP), Vulnerability Disclosure Programme (VDP), and Vulnerability Rewards Programme (VRP) across Whole-of-Government (WoG) systems.

Responsibilities:

• Lead a lean team of triage specialists, ensuring quality, efficiency, and timely processing of vulnerability reports
• Manage team performance, workload, and resource planning and perform hands-on triage and validation when required, particularly during peak periods or complex escalations
• Act as escalation point for complex vulnerability validation and severity rating decisions
• Mentor and train triage specialists on analysis, assessment, and documentation standards
• Own and continuously improve triage SOPs, workflows, and tools, including integration and maintenance of key triage platforms
• Develop scripts and automation (e.g., Python, workflow tools) to streamline triage processes, reporting, and platform integrations
• Liaise with government agencies, system owners, and security researchers, and support the Programme Team in facilitating smooth internal-external collaboration
• Analyze vulnerability trends, deliver presentations on notable findings, and prepare reports for management and stakeholders
• Undertake additional responsibilities as required to support programme objectives

Requirements

• Degree in Cybersecurity, Computer Science, or related technical field
• OSCP certification
• Familiarity with web vulnerabilities (e.g. OWASP Top 10), including severity rating, vulnerability categorisation, root cause analysis, and remediation options
• Familiarity with Burp Suite and Kali Linux to validate vulnerabilities
• Good command of English (Oral and Written)
• Experience mentoring junior team members
• Strong analytical and problem-solving capabilities
• Outstanding communication and stakeholder management skills
• Collaborative leadership style with a strong commitment to mentoring and fostering a supportive team environment
• Bug bounty or government/regulated environment experience preferred
• Ability to plan leave around scheduled GBBP and Pre-GBBP cycles

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: or such other successor site.

Benefits

• A wholly-owned subsidiary of GovTech.
• We promote a learning culture and encourage you to grow and learn.