AWPT Vulnerability Triage & Coordination Support(Penetration Testing)

ENCORA TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

ENCORA TECHNOLOGIES PTE. LTD. is seeking a vulnerability management professional to support the AWPT program, coordinating triage, remediation validation and governance. You will enhance Jira workflows, develop dashboards, and automate finding correlation.

You will review AI-enabled testing findings, assess exploitability and impact, identify false positives, coordinate remediation plans, and retest to ensure closure. You will produce governance reports and escalate overdue items as needed.

Qualifications

• Experience in vulnerability management and triage.
• Ability to review findings and assess exploitability and impact.
• Experience coordinating with application teams to review remediation plans and closures.

Responsibilities

• Triage vulnerabilities and validate remediation using Jira workflows.
• Develop dashboards and reports for vulnerability lifecycle tracking.
• Coordinate with stakeholders across teams to review findings.
• Review AI-generated findings for validity and severity.
• Retest vulnerabilities and confirm remediation effectiveness.
• Produce governance reports and metrics to support management updates.

Skills

Vulnerability management

Triage

Stakeholder coordination

Remediation validation

Automation

Dashboards

Tools

Jira

AI-powered testing tools

Job description

Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT program.

A. Development Activities

• Enhance triage workflows and automation capabilities within Jira.
• Develop dashboards and reporting for vulnerability lifecycle management.
• Implement automation to improve finding correlation and tracking.
• Support integration with AI-powered penetration testing tools.

B. Support Activities

• Review and triage findings generated by AI-powered penetration testing tools.
• Assess exploitability, severity, technical impact, and business impact.
• Identify false positives and duplicated vulnerabilities.
• Coordinate with application teams to review findings and remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate remediation effectiveness.
• Recommend closure, risk acceptance, or severity adjustment based on evidence.

C. Process Management & Governance

• Manage vulnerability lifecycle tracking through JIRA until closure.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical, disputed, or overdue vulnerabilities.
• Produce vulnerability governance reports and metrics.
• Support management updates