2153 - Ingeniero de Seguridad de Producto y Resiliencia Cibernética
Core
Define, execute, and continuously improve vulnerability management and Cyber Resilience Act (CRA) compliance activities across multiple embedded product lines.
Role type
Product Security and Cyber Resilience Engineer
Builds
Vulnerability management processes, SBOMs, compliance evidence, and audit-ready reports for embedded products
Domain
Cybersecurity, embedded systems, regulatory compliance
Required skills
Vulnerability management, CVE/CVSS/KEV/EPSS analysis, risk-based prioritization, SCA tools, SBOM generation, OSS compliance, Azure DevOps, Jira, technical documentation, cross-functional leadership
Preferred skills
Cyber Resilience Act (CRA), ISO 24882, IEC 62443, NIST SSDF, embedded systems, Linux, Yocto, BSP, firmware, JFrog, Jenkins, GitHub Actions, ServiceNow, Power BI, automation
Technologies
Black Duck, Mend, Snyk, Azure DevOps, Jira, JFrog, Jenkins, GitHub, GitHub Actions, ServiceNow, Power BI
Responsibilities
Lead vulnerability management activities including analysis, classification, tracking, and remediation verification; Define and improve operational models for CRA compliance including evidence management and SBOM practices; Provide technical leadership in prioritizing vulnerabilities using severity, KEV, EPSS, and exploitability criteria; Collaborate with product, development, and security teams to close vulnerabilities and regulatory gaps; Design and maintain templates, procedures, dashboards, and reporting mechanisms; Review and validate vulnerability classification and disposition decisions; Align SCA/OSS tool results, SBOM artifacts, and release evidence for full traceability; Participate in regulatory audits and explain vulnerability management processes; Mentor junior engineers and consultants on product security and compliance activities
Seniority
Senior, hands-on IC with mentorship responsibilities