Vulnerability Management & Application Security Analyst

Objective

Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT programme.

Key Responsibilities

A. Development Activities

• Enhance triage workflows and automation capabilities within Jira.
• Develop dashboards and reporting for vulnerability lifecycle management.
• Implement automation to improve finding correlation and tracking.
• Support integration with AI-powered penetration testing tools.

B. Support Activities

• Review and triage findings generated by AI-powered penetration testing tools.
• Assess exploitability, severity, technical impact, and business impact.
• Identify false positives and duplicated vulnerabilities.
• Coordinate with application teams to review findings and remediation plans.
• Review code changes, logs, and supporting evidence.
• Retest vulnerabilities and validate remediation effectiveness.
• Recommend closure, risk acceptance, or severity adjustment based on evidence.

C. Process Management & Governance

• Manage vulnerability lifecycle tracking through Jira until closure.
• Coordinate stakeholders and facilitate issue resolution.
• Escalate critical, disputed, or overdue vulnerabilities.
• Produce vulnerability governance reports and metrics.
• Support management updates.