AWPT Vulnerability Triage & Coordination Support

Objective

Provide vulnerability triage, remediation validation, stakeholder coordination, and vulnerability management support for the AWPT program.

A. Development Activities

•            Enhance triage workflows and automation capabilities within Jira.

•            Develop dashboards and reporting for vulnerability lifecycle management.

•            Implement automation to improve finding correlation and tracking.

•            Support integration with AI-powered penetration testing tools.

B. Support Activities

•            Review and triage findings generated by AI-powered penetration testing tools.

•            Assess exploitability, severity, technical impact, and business impact.

•            Identify false positives and duplicated vulnerabilities.

•            Coordinate with application teams to review findings and remediation plans.

•            Review code changes, logs, and supporting evidence.

•            Retest vulnerabilities and validate remediation effectiveness.

•            Recommend closure, risk acceptance, or severity adjustment based on evidence.

C. Process Management & Governance

•            Manage vulnerability lifecycle tracking through JIRA until closure.

•            Coordinate stakeholders and facilitate issue resolution.

•            Escalate critical, disputed, or overdue vulnerabilities.

•            Produce vulnerability governance reports and metrics.

•            Support management updates