AWPT Vulnerability Triage & Coordination Support

Objective

Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT program.

A. Development Activities

• Enhance triage workflows and automation capabilities within Jira.

• Develop dashboards and reporting for vulnerability lifecycle management.

• Implement automation to improve finding correlation and tracking.

• Support integration with AI-powered penetration testing tools.

B. Support Activities

• Review and triage findings generated by AI-powered penetration testing tools.

• Assess exploitability, severity, technical impact, and business impact.

• Identify false positives and duplicated vulnerabilities.

• Coordinate with application teams to review findings and remediation plans.

• Review code changes, logs, and supporting evidence.

• Retest vulnerabilities and validate remediation effectiveness.

• Recommend closure, risk acceptance, or severity adjustment based on evidence.

C. Process Management & Governance

• Manage vulnerability lifecycle tracking through JIRA until closure.

• Coordinate stakeholders and facilitate issue resolution.

• Escalate critical, disputed, or overdue vulnerabilities.

• Produce vulnerability governance reports and metrics.

• Support management updates