Cybersecurity Team Lead, Vulnerability Triage

Salary: RM 8,000 – RM 12,000 per month

ABOUT THE ROLE

Join our team as Cybersecurity Team Lead to lead vulnerability triage operations and manage a team of triage specialists. You'll validate and rate security findings, mentor team members, improve processes through automation, and serve as the escalation point for complex vulnerability decisions. This is a high-impact role ideal for someone with deep offensive security skills, program management experience, and a passion for team development.

This is a 12-month fixed-term contract engagement.

KEY RESPONSIBILITIES

• Lead a lean team of triage specialists, ensuring quality, efficiency, and timely processing of vulnerability reports

• Manage team performance, workload, resource planning, and perform hands-on triage during peak periods or complex escalations

• Act as escalation point for complex vulnerability validation and severity rating decisions

• Mentor and train triage specialists on analysis, assessment, and documentation standards

• Own and continuously improve triage SOPs, workflows, and tools, including platform integration

• Develop scripts and automation using Python and workflow tools to streamline triage processes and reporting

• Liaise with system owners, security researchers, and program teams to facilitate collaboration

• Analyze vulnerability trends and deliver presentations and reports for management and stakeholders

• Support program objectives and undertake additional responsibilities as needed

REQUIREMENTS

• Degree in Cybersecurity, Computer Science, or related technical field

• OSCP certification

• Familiarity with web vulnerabilities (OWASP Top 10), including severity rating, categorization, root cause analysis, and remediation

• Hands-on experience with Burp Suite and Kali Linux for vulnerability validation

• Experience mentoring junior team members

• Strong analytical and problem-solving capabilities

• Outstanding communication and stakeholder management skills

• Collaborative leadership style with strong commitment to mentoring and team development

• Ability to manage workload around scheduled program cycles

NICE-TO-HAVE

• Bug bounty or government/regulated environment experience

• Experience managing vulnerability disclosure or bug bounty programs

• Scripting experience (Bash, PowerShell, or other languages)

• Experience with vulnerability management platforms

• Strong offensive security mindset and hands-on hacking experience