Product Security Lead
Core
Establish and operate global product security incident management and vulnerability lifecycle capabilities, serving as the single point of contact for security incidents and regulatory compliance.
Role type
Senior Product Security Lead (Incident Management & Vulnerability Lifecycle)
Builds
Secure product development processes, vulnerability remediation workflows, and regulatory compliance artifacts for digital products and electronic components.
Domain
Industrial filtration technology, software supply chain security, and EU regulatory compliance (Cyber Resilience Act)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability lifecycle management, SBOM governance, cross-functional coordination, regulatory reporting, secure software development principles, risk communication
Preferred skills
EU CRA compliance experience, incident response leadership, secure-by-design architecture, vulnerability disclosure frameworks, security audit support
Technologies
SBOM tools, vulnerability management platforms, regulatory reporting systems
Responsibilities
Lead end-to-end vulnerability lifecycle from identification to remediation and disclosure; Maintain and govern machine-readable Software Bill of Materials (SBOM); Execute regulatory reporting obligations under EU Cyber Resilience Act; Coordinate cross-functional response efforts for security incidents; Establish external vulnerability disclosure channels; Develop metrics to track vulnerability management effectiveness
Seniority
Senior, hands-on IC with strategic advisory responsibilities
