Principal Infosec Engineer- Product Security Incident Response
Core
Lead complex vulnerability investigations and serve as the definitive technical authority for product security incident response (PSIRT) across the global product portfolio.
Role type
Principal Product Security Incident Response Engineer (PSIRT)
Builds
Next-gen PSIRT automation and tooling to scale vulnerability identification, triage, and response capabilities.
Domain
Cybersecurity / Product Security / Vulnerability Research
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Vulnerability research and variant hunting, Root cause analysis, Technical validation of product fixes, CVSS scoring and vulnerability classification, Security report and CVE advisory preparation, Data modeling for risk scoring, PSIRT automation architecture, Mentoring senior engineers, PoC exploit development, AI/ML/LLM application for security tasks, Expert scripting (Python, Go, PowerShell)
Preferred skills
Experience with EPSS and SSVC risk frameworks
Technologies
Python, Go, PowerShell, Generative AI, LLM frameworks
Responsibilities
Conduct complex analysis and proactive variant hunting across the product portfolio; Develop long-term remediations with principal architects; Define technical validation methodologies for product fixes; Collaborate with product, engineering, legal, privacy, and threat intelligence teams; Architect data models and risk-scoring methodologies for PSIRT telemetry; Architect the roadmap for next-gen PSIRT automation; Mentor senior and staff engineers in advanced vulnerability handling.
Seniority
Principal, hands-on IC with strategy & mentorship
