G01 - Triage Team Lead

FPT Asia Pacific Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

FPT Asia Pacific Pte Ltd is seeking a Triage Team Lead to oversee day-to-day triage operations, lead a team of triage specialists, and ensure accurate vulnerability assessments within required timelines. The role combines leadership, hands-on triage, process improvement, and automation, with ongoing interaction with government agencies and stakeholders.

The ideal candidate will have an OSCP certification, a degree in cybersecurity/CS/IT, and strong skills in vulnerability validation, OWASP Top

Qualifications

• Degree in Cybersecurity, Computer Science, Information Technology, or related field.
• OSCP certification is required.

Responsibilities

• Lead a lean team of triage specialists and ensure timely processing of vulnerability reports.
• Manage team performance, workload, and priorities.
• Perform hands-on vulnerability triage and validation during peak periods or escalations.
• Serve as escalation point for complex vulnerability validation and severity-rating decisions.
• Mentor and train triage specialists on vulnerability analysis and reporting standards.
• Own and improve triage SOPs, workflows, and tools.

Skills

Leadership

Team management

Vulnerability triage

Python scripting

Automation

Stakeholder engagement

Burp Suite

Kali Linux

OWASP Top 10

Analytical thinking

Mentoring

Education

OSCP certification

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Burp Suite

Kali Linux

Job description

Overview

The Triage Team Lead will oversee day-to-day triage operations, lead a team of triage specialists, and ensure vulnerability reports are assessed accurately, consistently, and within required timelines. The role combines team leadership, hands‑on vulnerability triage, process improvement, automation, and stakeholder engagement.

Key Responsibilities

• Lead a lean team of triage specialists, ensuring the quality, consistency, efficiency, and timely processing of vulnerability reports.
• Manage team performance, workload, resource planning, and operational priorities.
• Perform hands‑on vulnerability triage and validation when required, particularly during peak periods, complex cases, or escalations.
• Serve as the escalation point for complex vulnerability validation, categorisation, and severity‑rating decisions.
• Mentor and train triage specialists on vulnerability analysis, assessment methodologies, documentation, and reporting standards.
• Own and continuously improve triage SOPs, workflows, processes, and supporting tools.
• Manage the integration and maintenance of key platforms used to support vulnerability triage activities.
• Develop scripts and automation using tools such as Python and workflow automation platforms to streamline triage, reporting, and system integrations.
• Liaise with government agencies, system owners, security researchers, and other stakeholders to facilitate effective vulnerability management and resolution.
• Support the Programme Team in coordinating internal and external stakeholders across CVDP activities.
• Analyse vulnerability trends and notable findings, and prepare reports, presentations, and insights for management and stakeholders.
• Undertake additional responsibilities as required to support programme objectives.

Requirements

• Degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.
• OSCP certification.
• Good understanding of web application vulnerabilities, including the OWASP Top 10.
• Experience or strong knowledge in vulnerability validation, severity rating, vulnerability categorisation, root cause analysis, and remediation recommendations.
• Familiarity with security testing and vulnerability validation tools such as Burp Suite and Kali Linux.
• Strong analytical, investigative, and problem‑solving skills.
• Good command of written and spoken English, with the ability to communicate technical findings clearly.
• Experience mentoring, coaching, or guiding junior team members.
• Strong communication and stakeholder management skills.Collaborative leadership style with a commitment to developing and supporting team members.
• Bug bounty, vulnerability disclosure, penetration testing, or government/regulated-environment experience is preferred.
• Ability to plan leave around scheduled GBBP and Pre‑GBBP cycles to support programme operational requirements.

Why Join Us

Lead a specialised cybersecurity team supporting a high‑impact government vulnerability discovery programme. This role offers direct exposure to complex vulnerability assessments, security researchers, and Whole-of-Government systems, with opportunities to develop deeper expertise in vulnerability management and cybersecurity leadership.