AWPT Vulnerability Triage & Coordination Support(Penetration Testing)
Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT program. A. Development Activities • Enhance triage workflows and automation capabilities within Jira. • Develop dashboards and reporting for vulnerability lifecycle management. • Implement automation to improve finding correlation and tracking. • Support integration with AI-powered penetration testing tools. B. Support Activities • Review and triage findings generated by AI-powered penetration testing tools. • Assess exploitability, severity, technical impact, and business impact. • Identify false positives and duplicated vulnerabilities. • Coordinate with application teams to review findings and remediation plans. • Review code changes, logs, and supporting evidence. • Retest vulnerabilities and validate remediation effectiveness. • Recommend closure, risk acceptance, or severity adjustment based on evidence. C. Process Management & Governance • Manage vulnerability lifecycle tracking through JIRA until closure. • Coordinate stakeholders and facilitate issue resolution. • Escalate critical, disputed, or overdue vulnerabilities. • Produce vulnerability governance reports and metrics. • Support management updates