CVDP Triage Team Lead - A26255

Activate Interactive Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Bonus potential

Outpatient medical coverage

Flexi-work arrangements

Learning and development budget

Job summary

Activate Interactive Pte Ltd in Singapore is seeking an experienced cybersecurity leader to head the Crowdsourced Vulnerability Discovery Programme (CVDP) triage team within the Government Bug Bounty Programme.

This fixed-term 1-year role focuses on operations, mentoring triage specialists, and delivering timely validation and severity decisions across WoG systems, with opportunities to influence security across government agencies.

Qualifications

• Degree in Cybersecurity, Computer Science, or related technical field.
• OSCP certification.
• Familiarity with web vulnerabilities (OWASP Top 10) including severity rating, categorisation, root cause analysis, and remediation options.
• Familiarity with Burp Suite and Kali Linux to validate vulnerabilities.
• Experience mentoring junior team members.
• Strong analytical and problem‑solving capabilities.
• Outstanding communication and stakeholder management skills.
• Collaborative leadership style with a strong commitment to mentoring.
• Bug bounty or government/regulated environment experience preferred.
• Ability to plan leave around scheduled GBBP and Pre-GBBP cycles.

Responsibilities

• Lead a lean team of triage specialists, ensuring quality, efficiency, and timely processing of vulnerability reports
• Manage team performance, workload, and resource planning and perform hands-on triage and validation when required, particularly during peak periods or complex escalations
• Act as escalation point for complex vulnerability validation and severity rating decisions
• Mentor and train triage specialists on analysis, assessment, and documentation standards
• Own and continuously improve triage SOPs, workflows, and tools, including integration and maintenance of key triage platforms
• Develop scripts and automation (e.g., Python, workflow tools) to streamline triage processes, reporting, and platform integrations
• Liaise with government agencies, system owners, and security researchers, and support the Programme Team in facilitating smooth internal‑external collaboration
• Analyze vulnerability trends, deliver presentations on notable findings, and prepare reports for management and stakeholders
• Undertake additional responsibilities as required to support programme objectives

Skills

Web vulnerability expertise

Mentoring junior team members

Analytical & problem-solving

Stakeholder management

Team leadership

Communication skills

Education

Degree in Cybersecurity, Computer Science, or related field

OSCP certification

Tools

Burp Suite

Kali Linux

Job description

Activate Interactive Pte Ltd ("Activate") is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realise their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

Co-Development Business Unit is looking for a CVDP Triage Team Lead

This is a fixed term contract role. The engagement is 1 year.

You will work in Singapore Government Agencies

Internal Code: A26255

What will you do?

We are seeking an experienced cybersecurity professional to lead our Crowdsourced Vulnerability Discovery Programme (CVDP) triage team. This role encompasses managing daily operations, leading a team of triage specialist, and ensuring effective handling of vulnerability reports across government systems for the Government Bug Bounty Programme (GBBP), Vulnerability Disclosure Programme (VDP), and Vulnerability Rewards Programme (VRP) across Whole-of-Government (WoG) systems.

• Lead a lean team of triage specialists, ensuring quality, efficiency, and timely processing of vulnerability reports
• Manage team performance, workload, and resource planning and perform hands‑on triage and validation when required, particularly during peak periods or complex escalations
• Act as escalation point for complex vulnerability validation and severity rating decisions
• Mentor and train triage specialists on analysis, assessment, and documentation standards
• Own and continuously improve triage SOPs, workflows, and tools, including integration and maintenance of key triage platforms
• Develop scripts and automation (e.g., Python, workflow tools) to streamline triage processes, reporting, and platform integrations
• Liaise with government agencies, system owners, and security researchers, and support the Programme Team in facilitating smooth internal‑external collaboration
• Analyze vulnerability trends, deliver presentations on notable findings, and prepare reports for management and stakeholders
• Undertake additional responsibilities as required to support programme objectives

Requirements

What are we looking for?

• Degree in Cybersecurity, Computer Science, or related technical field
• OSCP certification
• Familiarity with web vulnerabilities (e.g. OWASP Top 10), including severity rating, vulnerability categorisation, root cause analysis, and remediation options
• Familiarity with Burp Suite and Kali Linux to validate vulnerabilities
• Experience mentoring junior team members
• Strong analytical and problem‑solving capabilities
• Outstanding communication and stakeholder management skills
• Collaborative leadership style with a strong commitment to mentoring and fostering a supportive team environment
• Bug bounty or government/regulated environment experience preferred
• Ability to plan leave around scheduled GBBP and Pre-GBBP cycles

Why join us?

Lead a specialised team in a high-impact government cybersecurity programme, with direct exposure to complex vulnerability work and a clear pathway to senior security leadership roles.

Benefits

What do we offer in return?

Competitive Compensation: Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution.

Benefits: Outpatient medical, specialist medical coverage and generous customisable flexi benefits, or flexi allowance; life and health insurance, thoughtful perks like special occasions "red packet" and CNY goodies, etc.

Employee Wellness: Support for your physical, mental, and overall well‑being through year‑round initiatives.

Growth & Development: Learning programmes, certification support, and a dedicated staff development budget. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Career Progression: Structured career pathways that enable you to grow along a technical/domain expert track or a leadership track.

Competency Framework: A structured and practical framework to support you to develop, perform, and succeed.

Flexible Work Arrangement: Staff may choose to work flexi-place, flexi-time, and flexi-load based on existing framework

Whyyou'lllove working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, colour, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice ( https://www.activate.sg/privacy-policy ) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.