Product Security Incident Response Program Manager (m/f/d) (Cybersecurity)

Location: Gratkorn, Austria; other locations include Bucharest, Spain (home based), and Glasgow. Home office and flexible working time are available.

Company

hirify.global develops hardware and software products, including semiconductor and embedded technologies.

What you will do

• Own the operational lifecycle of product vulnerability cases from intake through assessment, remediation, closure, and responsible disclosure.
• Define response plans, milestones, ownership, dependencies, escalation paths, communication cadence, and risk tracking.
• Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing teams.
• Facilitate vulnerability review meetings, track decisions and evidence, and drive outstanding actions to completion.
• Coordinate vulnerability disclosure with researchers, customers, partners, and external organizations, including CVE reservation and publication workflows.
• Coordinate security advisories and customer communications while improving PSIRT procedures, templates, governance, audit readiness, and readiness for the EU Cyber Resilience Act.

Requirements

• Experience in product security, embedded security, semiconductor security, cybersecurity, vulnerability management, or technical engineering programs.
• At least 3 years of relevant work experience.
• Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
• Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
• Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations.
• Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.
• Excellent communication skills and a passion for protecting innovative technology at scale.
• Fluent English.
• A conscious and reliable working approach is necessary because the role may involve security-related tasks and security certifications.

Nice to have

• Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments.
• PMP, PgMP, Scrum Master, SAFe, or another project or program management certification.

Culture & Benefits

• Home office options and flexible working time.
• Meal benefits and additional employee benefits.
• Market-competitive compensation benchmarked against the electronic and semiconductor industry.
• Employment under the Austrian collective bargaining agreement, with the role graded in Employment Group V.