Product Security Officer (w/m/d)
Core
Central Product Security Officer managing vulnerability intake, PSIRT operations, and compliance with EU regulations (Cyber Resilience Act, NIS2, AI Act) for a global photonics corporation.
Role type
Senior Product Security Officer (PSIRT & Compliance)
Builds
Vulnerability disclosure processes, SBOM lifecycle management, and security standards across the product lifecycle. (via careerplan.io/jobs/16012-44305483-710-S-product-security-officer-wmd-at-jenoptik-ag)
Domain
Cybersecurity, Product Security, Regulatory Compliance (EU)
Required skills
Vulnerability management, PSIRT operations, SBOM management, Threat modeling, Secure coding, Regulatory compliance (Cyber Resilience Act, NIS2, AI Act), Risk assessment, Process design
Preferred skills
CISSP, CSSLP, GIAC, CEH, Python scripting, SIEM/SOC tools, ISO/IEC 30111, ISO/IEC 29147
Technologies
CycloneDX, SPDX, SIEM, SOC tools, MS Office
Responsibilities
Manage vulnerability intake and initial assessment; Act as the sole corporate voice for reporting to ENISA and national authorities; Lead prioritization and patching schedules; Operate the VDP platform and manage researcher communication; Define and maintain product security standards; Integrate security testing and threat modeling into PLM processes; Lead the corporate PSIRT and provide technical guidance to R&D; Conduct internal security audits.
Seniority
Senior, hands-on IC with leadership responsibilities
