CVDP Triage Team Lead

GovTech Singapore; Singapore; On-site; SGD 140,000 - 200,000; Full time

Job summary

GovTech Singapore is seeking an experienced cybersecurity professional to lead our crowdsourced vulnerability triage efforts, overseeing daily operations across government systems and reporting programmes such as GBBP, VDP and VRP.

You will manage a lean team of triage specialists, mentor staff, drive process improvements, and develop automation in Python to streamline validation, reporting, and platform integrations, while collaborating with government agencies and security researchers.

Qualifications

• Degree in cybersecurity, computer science, or related field.
• OSCP or equivalent cybersecurity certification.
• Experience with vulnerability triage and disclosure programs.

Responsibilities

• Lead a lean triage team ensuring quality, efficiency, and timely processing of vulnerability reports.
• Manage performance, workload, and resource planning, and perform hands-on triage during peaks.
• Serve as escalation point for complex vulnerability validation and severity rating decisions.
• Mentor and train triage staff on analysis, assessment, and documentation standards.
• Own and improve triage SOPs, workflows, and tool integration.
• Develop scripts (Python) to streamline triage processes and reporting.
• Liaise with agencies, system owners, researchers, and support collaboration.
• Analyze vulnerability trends and prepare management reports.

Skills

Team leadership

Triage and validation

Analytical thinking

Problem-solving

Stakeholder management

Mentoring

Education

Degree in Cybersecurity / Computer Science

OSCP certification

Tools

Burp Suite

Kali Linux

Job description

We are seeking an experienced cybersecurity professional to lead our Crowdsourced Vulnerability Discovery Programme (CVDP) triage team. This role encompasses managing daily operations, leading a team of triage specialist, and ensuring effective handling of vulnerability reports across government systems for the Government Bug Bounty Programme (GBBP), Vulnerability Disclosure Programme (VDP), and Vulnerability Rewards Programme (VRP) across Whole-of-Government (WoG) systems.

What you'll do

• Lead a lean team of triage specialists, ensuring quality, efficiency, and timely processing of vulnerability reports
• Manage team performance, workload, and resource planning and perform hands-on triage and validation when required, particularly during peak periods or complex escalations
• Act as escalation point for complex vulnerability validation and severity rating decisions
• Mentor and train triage specialists on analysis, assessment, and documentation standards
• Own and continuously improve triage SOPs, workflows, and tools, including integration and maintenance of key triage platforms
• Develop scripts and automation (e.g., Python, workflow tools) to streamline triage processes, reporting, and platform integrations
• Liaise with government agencies, system owners, and security researchers, and support the Programme Team in facilitating smooth internal-external collaboration
• Analyze vulnerability trends, deliver presentations on notable findings, and prepare reports for management and stakeholders
• Undertake additional responsibilities as required to support programme objectives

What you need

• Degree in Cybersecurity, Computer Science, or related technical field
• OSCP certification
• Familiarity with web vulnerabilities (e.g. OWASP Top 10), including severity rating, vulnerability categorisation, root cause analysis, and remediation options
• Familiarity with Burp Suite and Kali Linux to validate vulnerabilities
• Good command of English (Oral and Written)
• Experience mentoring junior team membersStrong analytical and problem-solving capabilities
• Outstanding communication and stakeholder management skills
• Collaborative leadership style with a strong commitment to mentoring and fostering a supportive team environment
• Bug bounty or government/regulated environment experience preferred
• Ability to plan leave around scheduled GBBP and Pre-GBBP cycles

Why join us

Lead a specialised team in a high-impact government cybersecurity programme, with direct exposure to complex vulnerability work and a clear pathway to senior security leadership roles.