Objective
Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT program.
- Development Activities
- Enhance triage workflows and automation capabilities within Jira.
- Develop dashboards and reporting for vulnerability lifecycle management.
- Implement automation to improve finding correlation and tracking.
- Support integration with AI-powered penetration testing tools.
- Support Activities
- Review and triage findings generated by AI-powered penetration testing tools.
- Assess exploitability, severity, technical impact, and business impact.
- Identify false positives and duplicated vulnerabilities.
- Coordinate with application teams to review findings and remediation plans.
- Review code changes, logs, and supporting evidence.
- Retest vulnerabilities and validate remediation effectiveness.
- Recommend closure, risk acceptance, or severity adjustment based on evidence.
- Process Management & Governance
- Manage vulnerability lifecycle tracking through JIRA until closure.
- Coordinate stakeholders and facilitate issue resolution.
- Escalate critical, disputed, or overdue vulnerabilities.
- Produce vulnerability governance reports and metrics.
- Support management updates
