Staff Product Security Specialist
Core
Lead Product Security Incident Response Team (PSIRT) activities, coordinating cross-functional stakeholders during product vulnerability and cybersecurity emergency response situations.
Role type
Staff Product Security Specialist (Incident Response & Vulnerability Management)
Builds
Product security posture, incident response capabilities, regulatory compliance reporting
Domain
Cybersecurity / Product Security / Rail Equipment
Deliverable
client delivery
Required skills
Product vulnerability management, Cybersecurity incident response, Secure Development Lifecycle (SDLC), Cybersecurity compliance standards (NERC-CIP, ISO, NIST), Vulnerability frameworks (CVSS, CVE, CWE), Threat analysis, Regulatory reporting
Preferred skills
Advanced English verbal and written communication, Cross-functional stakeholder coordination, Global team leadership
Technologies
NERC-CIP, ISO, NIST, CVSS, CVE, CWE
Responsibilities
Lead PSIRT response activities and coordinate stakeholders during product vulnerability and cybersecurity incidents; Coordinate response efforts and regulatory reporting for actively exploited product vulnerabilities in accordance with the EU Cyber Resilience Act (CRA); Maintain and participate in a documented on-call rotation; Facilitate incident response "war rooms" for vulnerability triage, investigation, and mitigation; Lead management communications and coordinate escalation activities; Lead the development and distribution of security advisories; Conduct preparedness and readiness activities including tabletop exercises; Perform threat analysis leveraging vulnerability characteristics and threat intelligence; Lead lessons learned reviews and after-action activities; Prepare and present reports, risk assessments, and status updates to leadership; Drive continuous improvement initiatives for the PSIRT program.
Seniority
Staff, technical and operational leader
