AWPT Vulnerability Triage & Coordination Support

HI5 ELITE PTE. LTD.; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

HI5 ELITE PTE. LTD. in Singapore seeks a Vulnerability Management Analyst to provide triage, remediation validation, and governance for the AWPT program. You will coordinate with stakeholders, review findings from AI security tools, and ensure timely closure through Jira.

This role emphasizes risk assessment, remediation verification, and reporting metrics to management. Candidates should be prepared to collaborate across teams and drive remediation actions to completion.

Responsibilities

• Provide vulnerability triage and remediation validation for the AWPT program.
• Coordinate with stakeholders to review findings and remediation plans.
• Review findings from AI-powered testing tools and assess exploitability, severity, and business impact.
• Retest vulnerabilities and validate remediation effectiveness; recommend closure, risk acceptance, or severity adjustment.
• Manage vulnerability lifecycle tracking through Jira until closure and produce governance reports and metrics.
• Escalate critical, disputed, or overdue vulnerabilities and support management updates.

Job description

Objective

Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT program.

A. Development Activities

• Enhance triage workflows and automation capabilities within Jira.
• Develop dashboards and reporting for vulnerability lifecycle management.
• Implement automation to improve finding correlation and tracking.
• Support integration with AI-powered penetration testing tools.

B. Support Activities

• Review and triage findings generated by AI-powered penetration testing tools.
• Assess exploitability, severity, technical impact, and business impact.
• Identify false positives and duplicated vulnerabilities.
• Coordinate with application teams to review findings and remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate remediation effectiveness.
• Recommend closure, risk acceptance, or severity adjustment based on evidence.

C. Process Management & Governance

• Manage vulnerability lifecycle tracking through JIRA until closure.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical, disputed, or overdue vulnerabilities.
• Produce vulnerability governance reports and metrics.
• Support management updates