CVDP Triage Team Lead

We are seeking an experienced cybersecurity professional to lead our Crowdsourced Vulnerability Discovery Programme (CVDP) triage team. This role encompasses managing daily operations, leading a team of triage specialist, and ensuring effective handling of vulnerability reports across government systems for the Government Bug Bounty Programme (GBBP), Vulnerability Disclosure Programme (VDP), and Vulnerability Rewards Programme (VRP) across Whole-of-Government (WoG) systems.

What you'll do

• Lead a lean team of triage specialists, ensuring quality, efficiency, and timely processing of vulnerability reports
• Manage team performance, workload, and resource planning and perform hands-on triage and validation when required, particularly during peak periods or complex escalations
• Act as escalation point for complex vulnerability validation and severity rating decisions
• Mentor and train triage specialists on analysis, assessment, and documentation standards
• Own and continuously improve triage SOPs, workflows, and tools, including integration and maintenance of key triage platforms
• Develop scripts and automation (e.g., Python, workflow tools) to streamline triage processes, reporting, and platform integrations
• Liaise with government agencies, system owners, and security researchers, and support the Programme Team in facilitating smooth internal-external collaboration
• Analyze vulnerability trends, deliver presentations on notable findings, and prepare reports for management and stakeholders
• Undertake additional responsibilities as required to support programme objectives

What you need

• Degree in Cybersecurity, Computer Science, or related technical field
• OSCP certification
• Familiarity with web vulnerabilities (e.g. OWASP Top 10), including severity rating, vulnerability categorisation, root cause analysis, and remediation options
• Familiarity with Burp Suite and Kali Linux to validate vulnerabilities
• Good command of English (Oral and Written)
• Experience mentoring junior team members
• Strong analytical and problem-solving capabilities
• Outstanding communication and stakeholder management skills
• Collaborative leadership style with a strong commitment to mentoring and fostering a supportive team environment
• Bug bounty or government/regulated environment experience preferred
• Ability to plan leave around scheduled GBBP and Pre-GBBP cycles

Why join us

Lead a specialised team in a high-impact government cybersecurity programme, with direct exposure to complex vulnerability work and a clear pathway to senior security leadership roles.