Cybersecurity Team Lead, Vulnerability Triage

PowTech Solution (M) Sdn. Bhd; Kuala Lumpur; On-site; MYR 90,000 - 135,000; Full time

Job summary

PowTech Solution (M) Sdn. Bhd is seeking a Cybersecurity Team Lead to drive vulnerability triage operations and lead a dedicated team. You will validate findings, mentor staff, and push automation to improve processes while serving as the escalation point for complex decisions.

This 12-month fixed-term contract engagement requires strong offensive security skills, program management experience, and a passion for team development.

Qualifications

• Degree in Cybersecurity, Computer Science, or related technical field.
• OSCP certification.
• Familiarity with OWASP Top 10 and vulnerability severity ratings.
• Hands-on Burp Suite and Kali Linux for validation.
• Experience mentoring junior team members.
• Strong analytical and problem-solving capabilities.
• Outstanding communication and stakeholder management skills.
• Collaborative leadership with mentoring focus.
• Ability to manage workload around program cycles.

Responsibilities

• Lead a lean team of triage specialists with quality and efficiency.
• Manage performance, workload, and resource planning; perform hands-on triage.
• Escalate complex vulnerability validation and severity decisions.
• Mentor triage specialists on analysis and documentation.
• Develop SOPs, workflows and tools; drive platform integration.
• Create Python scripts and automation for triage reporting.
• Interact with system owners, researchers, and program teams.
• Deliver vulnerability trend analyses and management reports.
• Support program objectives and related responsibilities.

Skills

Analytical thinking

Stakeholder communication

Team leadership

Problem solving

Education

Degree in Cybersecurity

OSCP certification

Tools

Burp Suite

Kali Linux

Python

Job description

Cybersecurity Team Lead, Vulnerability Triage

Join our team as Cybersecurity Team Lead to lead vulnerability triage operations and manage a team of triage specialists. You'll validate and rate security findings, mentor team members, improve processes through automation, and serve as the escalation point for complex vulnerability decisions. This is a high-impact role ideal for someone with deep offensive security skills, program management experience, and a passion for team development.

This is a 12-month fixed-term contract engagement.

Key responsibilities

Lead a lean team of triage specialists, ensuring quality, efficiency, and timely processing of vulnerability reports

Manage team performance, workload, resource planning, and perform hands-on triage during peak periods or complex escalations

Act as escalation point for complex vulnerability validation and severity rating decisions

Mentor and train triage specialists on analysis, assessment, and documentation standards

Own and continuously improve triage SOPs, workflows, and tools, including platform integration

Develop scripts and automation using Python and workflow tools to streamline triage processes and reporting

Liaise with system owners, security researchers, and program teams to facilitate collaboration

Analyze vulnerability trends and deliver presentations and reports for management and stakeholders

Support program objectives and undertake additional responsibilities as needed

Requirements

Degree in Cybersecurity, Computer Science, or related technical field

OSCP certification

Familiarity with web vulnerabilities (OWASP Top 10), including severity rating, categorization, root cause analysis, and remediation

Hands-on experience with Burp Suite and Kali Linux for vulnerability validation

Experience mentoring junior team members

Strong analytical and problem-solving capabilities

Outstanding communication and stakeholder management skills

Collaborative leadership style with strong commitment to mentoring and team development

Ability to manage workload around scheduled program cycles

Nice-to-have

Bug bounty or government/regulated environment experience

Experience managing vulnerability disclosure or bug bounty programs

Scripting experience (Bash, PowerShell, or other languages)

Experience with vulnerability management platforms

Strong offensive security mindset and hands-on hacking experience